Privacy Notice
Effective 2026-04-21 · Beta version
Summary of processing
| Item | Purpose | Retention | Right to refuse |
|---|---|---|---|
| Email, display name, avatar URL | Account identity | Until account deletion | Refusal prevents account creation |
| Recipes, photos, stories, tags | Service display + search | Until user deletion | You may delete any post at any time |
| Heart / virtual Lumi activity | Progression + counter display | Until account deletion | N/A (aggregate only, no sale) |
| Device info (browser, OS) | Performance + error logs | 90 days rolling | Refusal may reduce reliability |
What we collect
- Account info from Google or email sign-in (email, display name, avatar URL).
- Content you publish (recipes, photos, stories, tags).
- Heart and virtual-Lumi activity (for progression and counter display).
- Basic device info (browser, OS) for performance and error logs.
What we strip from photos
Photos you upload are re-encoded before storage, which removes all EXIF metadata including GPS coordinates. Your home, restaurant, or travel locations are not stored or displayed unless you type them into the post yourself.
How we use it
To operate the service, show your content to others, and maintain your progression (hearts, level, virtual Lumi). We offer an optional AI feature that drafts a recipe from the public description of a YouTube video you choose to import; you review and edit any draft before publishing. For that feature we process only the public video title and description text, for that purpose only, under an appropriate legal basis. We do not sell personal data. We do not run behavioral ads in the beta.
Where it lives
Service hosting via Vercel. Database via Supabase (PostgreSQL). Image storage via Supabase Storage. Public video metadata is retrieved via the Google/YouTube Data API. AI recipe drafting is provided via the Anthropic Claude API (Anthropic PBC, USA) — we send only the public video title and description text, never your account data. Transfers to the United States are covered by Standard Contractual Clauses (SCCs). Data may be processed in the United States or the European Union, depending on provider region.
Your rights
- Request a copy of your data.
- Request deletion of your account and content.
- Opt out of non-essential communication.
Email lumiere-dish-support@googlegroups.com for any of the above. We respond within 14 days in the beta.
Cookies
We use a minimal session cookie for authentication (ld_beta_authed), a language preference cookie (ld_locale), and a local preference store for Dual-Mode last-used setting. No third-party analytics or ad trackers in the beta.
Children
Lumière is for users aged 13 and over. If we learn that a child under 13 has created an account, we will delete it.
This notice is a beta-stage disclosure, not a substitute for formal legal counsel review.