Privacy Policy

Lumara Links (“we”, “us”) is operated by Lumara. This policy explains what happens to your data when you use the free URL shortener and QR code generator at lumara.chat. We designed the core tools to work without an account, and this policy reflects that: we collect the minimum needed to make a short link or QR code work.

Data we collect

When you shorten a URL, we store the destination URL, the generated short code or custom alias, and the time it was created, so the link can redirect visitors correctly. We also keep a lightweight click counter per link. When you generate a QR code, the content you encode is processed to produce the image and is not stored beyond that request unless it was created from a link you already shortened.

Anonymous usage

The core shortening and QR generation tools do not require an account, an email address, or any payment information. We don’t ask who you are before you use them, and the data described above is not tied to a personal identity — there is currently no account system to tie it to.

Cookies and local storage

The core tools do not use tracking or advertising cookies. We use browser local storage to remember two preferences on your device: your light/dark/system theme choice and your selected language. Neither is used for tracking and neither leaves your device. See our Cookie Policy for full detail.

Analytics

Lumara Links does not currently run visitor analytics or tracking scripts (no Google Analytics or similar third-party tracker is embedded in the site). The dashboard shown at /analytics uses sample data and is clearly labeled as such; the only real number tracked per link today is the basic click counter mentioned above. If real per-click analytics (referrer, approximate location, device type) are added in a future release, this policy will be updated first to describe exactly what’s collected.

Third-party services

We use infrastructure providers to run the site (hosting, and optionally a Supabase database for link storage). These providers process data on our behalf under their own security and privacy commitments, strictly to operate the service — we do not sell or share link data with advertisers or data brokers. If you follow a shortened link, the destination website is a separate, independent third party responsible for its own privacy practices; see our Disclaimer.

Security

We apply standard safeguards to protect stored data, including server-side input validation, rate limiting on link and QR creation to deter abuse, and keeping sensitive credentials (like database service keys) restricted to server-side code that never reaches your browser. No online service can guarantee absolute security, but we treat the data we do hold as something to protect, not exploit.

Your rights

Because Lumara Links doesn’t use accounts, there’s no profile to log into and manage. If you created a short link and want it removed, contact us with the short URL and we’ll act on that request. Depending on your location, you may have additional rights under laws like the GDPR or CCPA regarding data we hold about you; contact us and we’ll do our best to help, even though our anonymous-by-design model means we typically have very little to act on beyond a specific link you point us to.

Data retention

Short links remain active until removed for abuse, inactivity, or legal reasons. Optional link expiration is planned as a future, user-controlled feature rather than something applied automatically today.

Children’s privacy

Lumara Links is not directed at children and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by updating the date at the top of this page.

Contact

Questions about this policy, or requests regarding your data, can be sent to shortener@lumara.chat or via our Contact page.