Cookie & Tracking Policy

1. Comprehensive Disclosure on Telemetry

Lumina Apps (https://lumina-apps.com) utilizes advanced telemetry to ensure the stability and security of our high-load enterprise environments. In accordance with the 2026 digital privacy standards, we have transitioned to a Privacy-First Edge Tracking paradigm. Unlike traditional persistent tracking, our system architecture relies on ephemeral cryptographic hashes. This ensures that while we can optimize our global content delivery network (CDN), your individual browsing identity remains obfuscated and decoupled from your hardware signature.

2. Data Minimization & Privacy-by-Design

Our commitment to data sovereignty means we strictly adhere to the principle of "Data Minimization." We only collect metadata that is mathematically necessary to provide sub-millisecond latency for our cloud-native applications. We do not engage in cross-site behavioral tracking or the creation of longitudinal consumer profiles for advertising purposes.

3. Detailed Taxonomy of Tracking Technologies

We classify our cookies and tokens into four distinct technical categories:

Category Function Persistence
Systemic (Essential) Handles Zero-Trust session authentication and load balancer routing. Necessary for the firewall to recognize verified human traffic. Session-based (deleted upon closing)
Performance (Analytics) Monitors the execution speed of Rust-Wasm components and identifies bottlenecks in distributed GPU clusters. 24 Hours (Rolling hash)
Functional (Preference) Remembers regional compliance settings, high-contrast UI modes, and decentralized identity (DID) permissions. 30 Days
Security (Integrity) Detects automated headless browsers, botnets, and anomalous click patterns to prevent DDoS attacks. Persistent (Encrypted)

4. Cookie Life Cycle & Erasure Protocols

The majority of the tokens used by Lumina Apps are "Session Tokens," which are purged immediately upon the termination of your browser session. For persistent cookies used for system integrity, we employ an automated Self-Destruct Protocol. If a user does not return to our domain within 180 days, all associated server-side metadata silos are cryptographically erased, rendering any remaining client-side cookies useless and unlinked.

5. Web3, GPC, and User Autonomy

We are fully compatible with the Global Privacy Control (GPC). If your browser sends a GPC signal, our servers automatically disable all non-essential telemetry. Furthermore, for users interacting with our decentralized modules, we support Smart Contract Permissions. You may link your blockchain wallet to our privacy dashboard to grant or revoke data processing consent via immutable on-chain transactions.

6. Third-Party Edge Nodes

To provide global availability, we utilize high-performance computing nodes provided by AWS and NVIDIA. These partners may place technical cookies required for the execution of low-level hardware acceleration. All such interactions are governed by Data Processing Agreements (DPAs) that strictly prohibit these providers from accessing unencrypted user metadata.

Questions & Compliance

If you require a full audit of the telemetry data associated with your IP address, or wish to exercise your right to portability under GDPR/CCPA, please contact our Data Protection Officer:

Email: [email protected]

Response SLA: Within 48 business hours.