privacy

What we keep, and what we don't.

Written plainly, because a privacy notice nobody can read is not a privacy notice.

If you join the list

We keep your email address and the date you joined. That is all. We use it to write to you about Still and about what we are building, once or twice a month. We never sell it, rent it, or pass it to anyone else. Every letter has an unsubscribe link, and unsubscribing removes you from the list rather than hiding you in it.

If you buy something

We keep your name, email, phone number, and the delivery address you gave, along with what you ordered and what you paid. We need those to make the parcel arrive and to help you if something goes wrong. Your address is shared with the postal carrier, because somebody has to carry it.

Payments are handled by Stripe. Your card details are typed on Stripe's own page and never reach our server, so we could not see your card number even if we wanted to. Stripe keeps its own record of the payment under its privacy policy.

If you try a photo in the demo

The picture you choose never leaves your device. It is read by your own browser and turned into ink on your own machine. Nothing is uploaded, and we never see it.

If you use the app

The Luminal Labs app does not connect to the internet. Not for accounts, not for analytics, not for crash reports, not for fonts. There is no sign-in, because there is nothing to sign in to, and we have no server that knows the app exists.

The photo you choose is cropped and turned into ink by your own phone, and goes straight to the frame in front of you over Bluetooth. It is never uploaded, and it never reaches us.

The app remembers two things, and both stay on your phone: which frame you last sent a picture to, so it can find that one again rather than a neighbour's, and how you like your pictures rendered. Deleting the app deletes them.

It asks for three permissions. Bluetooth, to find your frame and send the picture. Photos, to let you pick one. The app only ever sees the picture you choose. NFC, so you can tap the phone to the frame instead of picking it from a list. On Android 11 and older the system also asks for location permission before it will allow a Bluetooth scan at all, which is an Android rule rather than something we want: the app never asks the phone where it is, and would not know what to do with the answer.

How we count visitors

We count how many people open the site and which pages they read, because we cannot improve it blind. It is done here, on our own server, and it uses no cookies.

To tell two readers apart we take your network address and your browser's description, mix them with today's date and a secret held only by this server, and store the resulting hash. It cannot be reversed into your address, it is not shared with anyone, and it changes at midnight, so you are never followed from one day to the next. We also record which page was read, which site linked you here if any, and whether you are on a phone.

What we do not do

There are no advertising trackers on this site, no third party analytics following you around the web, and no cookies beyond the one that keeps the site's owner signed in to the admin portal. We do not build a profile of you.

How long we keep it

List addresses stay until you unsubscribe. Order records stay for as long as we are required to keep them for tax and warranty purposes, then go. Visit counts are deleted after a year.

Having it removed

Write to luminallabs@gmail.com and ask. We will tell you what we hold and delete it, apart from anything a tax authority requires us to keep. You do not need to give a reason.

Luminal Labs is based in Sydney, Australia. If this page ever stops matching what we actually do, the page is wrong and we want to hear about it.