Privacy Policy

Account. Your email address and a password (we only ever store a cryptographic hash), or the identity provided when you sign in with Apple, Google or Discord.

Billing. Payments are processed by Stripe or Patreon — your card details go to them, not us. We store your subscription status, tier, and purchase history (which products, when, and the email used at checkout).

Activity. Bookmarks, downloads, redeemed codes, and — for licensed software — which devices you have activated. If you connect Discord, we store your Discord ID to grant member roles.

Notifications. If you enable push notifications, we store the anonymous subscription token your browser or device issues. It can’t be used to identify you outside this purpose, and it is deleted when you turn notifications off.

Technical. Standard server logs (IP address, browser type) and error reports, which may include technical details of your session, are collected to keep the service running and secure.

Analytics & advertising. Only with your consent (the cookie banner), we use Google Analytics to measure traffic and the Meta Pixel to measure the effectiveness of our ads. Decline and neither loads.

To provide the service you signed up for: delivering content and downloads, processing payments, gating member tiers, sending service emails (receipts, account changes), and support. With your consent, we also send the newsletter and product updates — every email has an unsubscribe link.

Our legal bases under UK GDPR are performance of a contract (running your membership), legitimate interests (security, fraud prevention, improving the service), and consent (marketing, analytics cookies, push notifications).

We don’t sell your data. We share it only with the processors that run Lux Cache: Supabase (database & authentication, hosted in the EU), Stripe and Patreon (payments), Vercel (hosting), Brevo (email), Sentry (error monitoring), Google (analytics, consent-gated), Meta (ads, consent-gated), and our content-delivery providers for audio and video (Cloudflare, Bunny, Mux). Each processes your data under their own data-processing agreements.

Where data leaves the UK/EEA, it is protected by standard contractual clauses or an equivalent safeguard.

Account data is kept while your account is active. Delete your account (Account → Delete account) and we remove your profile, subscriptions, bookmarks, device activations and notification tokens. Records of payments are retained as required by tax and accounting law. Server logs and error reports expire automatically on short rolling windows.

You can access, correct, export or erase your personal data, and object to or restrict processing. Most of this you can do yourself in your account settings, including full account deletion. For anything else, email hello@luxcache.com and we’ll respond within a month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Essential cookies keep you signed in and remember your consent choice — the service can’t work without them. The only non-essential cookies are set by Google Analytics and the Meta Pixel, and only after you accept them in the banner. You can change your mind by clearing the site’s cookies.

Lux Cache is not directed at children and is intended for users aged 16 and over.

If we make material changes to this policy we’ll notify members by email or an in-app notice before they take effect. The effective date above always reflects the current version.