Privacy

We collect the minimum needed to run Lumovio and never sell personal data. There are no ads and no third-party trackers.

What we store

• Account: email address, display name, password hash (or the identifier from Google/Apple/Discord sign-in), two-step verification secret.
• Profiles: names, avatars, language and region preferences, PIN hashes.
• Your library: lists, watchlist, favourites, ratings, watch history and playback positions — per profile.
• Media server connections: server address and an access token, encrypted at rest (AES-256-GCM). Video never passes through our servers.
• Security data: active sessions with browser user-agent and IP address, rate-limiting counters, an audit log of administrator actions.
• Imports: files you upload are parsed and the matched rows stored; you can undo an import.

What is private by default

Watch history, playback progress, connected servers and personal data are never public. Public profiles show only what you opt into (favourites, chosen lists, ratings).

Processors

• Cloudflare — DNS, TLS and request proxying.
• Resend — transactional e-mail (verification, password reset, optional notifications).
• TMDB — catalog data; requests are made by our server and contain no personal data.
• OpenAI — only when you use AI search: the text of your query (and, if you opt in, titles/genres from your history). Never your e-mail or servers.
• Our hosting provider (a virtual server) — runs the service and the database; backups go to encrypted object storage (Cloudflare R2).

Cookies

Only essential cookies: your session, chosen language, theme and TV mode. No advertising or analytics cookies.

Retention

Data is kept while your account exists. Deleting your account removes all profiles, history and connections; encrypted backups roll over within 30 days.

Your rights

You can access, export (JSON), correct and delete your data yourself in Settings. For anything else, write to [email protected].

Last updated 2026-10-22.