Privacy & cookies

01Privacy-first principle

Lumen Tool is designed to collect as little personal information as possible. The tool itself runs mainly in your own browser.

We do not sell personal data. We do not share data with advertisers. We do not use analytics for personalised advertising, and we do not build personal profiles of visitors.

Any information processed is used only for clear, limited purposes: operating the website, keeping it secure and reliable, answering email, and understanding general usage so the tool can be improved.

02Who this applies to

This page applies to everyone who visits lumentool.com or uses Lumen Tool.

03Information processed on the website

The public website works without an account, so you do not need to provide account details to view it.

Basic technical information may be processed automatically when the website loads, such as browser type, device information, IP address, timestamps and server logs. This is used to operate, protect and troubleshoot the website. The server also uses the connection address to determine a broad country/market so the site can choose the appropriate pricing market; the lookup is not used for precise location tracking.

Photo Lighting project files can be downloaded to your own computer and opened again later. The Archive is separate, private account storage for the setups, comparisons, previews, notes, collections and reference information you explicitly save. Photos are uploaded only when you choose to include or add one to the Archive. You can also download a complete Archive backup to your own computer and restore it later.

04Accounts and Lumen Tool

Lumen Tool access requires an account, and that account is your email address. When you ask to sign in we mail you a one-time code and link that expire after 20 minutes. Signing in creates a secure, long-lived session so you stay signed in on that device until you sign out, remove the browser session or delete your account.

For a Lumen Tool account we keep your email address, whether the subscription is running, which plan it is, when it renews or ends, and the customer number our payment provider uses for you. To help against someone hammering the sign-in page, a count of recent sign-in attempts is briefly kept against the network address it comes from.

Paying runs through Stripe, our payment provider. You enter your card and billing details on Stripe's own payment page: those details go to Stripe, not to us. We never see or store a card number. Stripe tells us who paid, which plan and when it renews, and it keeps your name, address, VAT number if you gave one, and your invoices, as its own records and to meet tax and accounting rules.

Account mail, such as your sign-in code and the note that a subscription has ended, is delivered by Resend, our email provider.

Deleting your account on the account page removes your email address, your plan, your sign-in and everything you saved in the Archive from our side. It does not cancel a running subscription, and it cannot remove the invoices and payment records Stripe has to keep by law.

05Contact form and email

If you use the contact form or contact Lumen Tool by email, the information you choose to send is processed: your name where provided, email address, subject, message and any details you include. It is used to deliver, read and answer your message.

Contact-form messages are sent through Resend to Lumen Tool's mailbox. Contact details are not added to a marketing list or used for advertising.

06Cookies

Lumen Tool uses necessary cookies and browser storage to keep you signed in where applicable, remember interface choices and local workspace state, keep local drafts and remember settings such as your analytics choice. Most simulator workspace data stays in your own browser unless you explicitly save it to the Archive.

Google Analytics may place short-lived first-party analytics cookies to recognise the same browser across visits. You can turn Analytics off below; that choice is remembered locally and accessible Google Analytics cookies are removed.

Lumen Tool does not use advertising cookies, Google Signals, advertising identifiers or analytics for personalised advertising.

07Analytics

Lumen Tool uses Google Analytics 4 only to understand whether the website and tool work well and where improvements are needed. Basic analytics starts when a page loads unless you have opted out, and it is configured in a privacy-restricted way.

This may include visitor and session counts, page visits, engagement time, general navigation, browser and broad device type, operating system, and a general geographic region.

As part of the connection, Google briefly receives the IP address to work out a general region, but Google Analytics 4 does not log or store it. Lumen Tool does not use analytics for precise location or fingerprinting, and disables Google Signals and ad personalisation.

Analytics never receives names, email addresses or anything you type. We do not record your clicks, the things you fill in, or your screen.

If you turn Analytics off, Google Analytics stops immediately, stays off on later page loads, and accessible Google Analytics cookies are removed. You can change the setting above at any time without losing any functionality.

08Service providers

Lumen Tool uses trusted service providers for hosting, infrastructure, analytics, payment and email. It is hosted on OVHcloud servers in the United States, Coolify is used to put updates live, Stripe handles payment and subscriptions, and Resend delivers account email.

The in-browser face-reading feature in Reference Lab runs on your own device. Its MediaPipe code, model and WebAssembly files are served from Lumen Tool itself, and analysing a portrait does not upload that portrait.

Taking a portrait from the Reference Lab into the Lighting Simulator keeps it in your browser for that tab's visit. When you save a new Archive item from the Simulator while that portrait is active, the portrait is uploaded and saved with the item automatically. Photos you add directly to the Archive are uploaded when you choose them. Stored photos are processed by our server and kept privately in OVHcloud Object Storage in the United States. We keep a resized image and thumbnail, not the original upload, and strip embedded metadata from the stored images. Access is checked against your account; temporary image links are not public sharing links.

These providers may process limited technical information only as needed to help Lumen Tool operate. They are not allowed to sell your data or use it for unrelated advertising. More detail is on the Data processing page.

09Legal basis

The basis for privacy-restricted first-party analytics is our legitimate interest in seeing how the website is used. You can object at any time by turning Analytics off above, without affecting your use of Lumen Tool.

For necessary website operation, security and technical logs, the basis is the legitimate interest in operating and protecting the service, and for keeping sign-in attempts briefly, the legitimate interest in protecting accounts against abuse.

For a Lumen Tool account and its payment, the basis is the agreement between you and us: we cannot give you what you paid for without it. Keeping invoices and payment records is a legal obligation.

10How long we keep information

Google Analytics uses Google's shortest available retention period. The analytics cookie is configured for no more than 60 days; turning Analytics off stops collection and removes accessible Google Analytics cookies.

Necessary server logs and security records are kept only as long as needed to operate and protect the website. A sign-in code or link expires after 20 minutes. A signed-in session is deliberately long-lived so the account stays signed in on that device; signing out or deleting the account removes that session. Records used to limit repeated sign-in attempts are kept only briefly.

Account details and active Archive items are kept while your account exists. When a subscription ends, the account and its Archive are kept for 30 more days and then removed, after a reminder email three days before; its technical recovery copies then follow the same 14-day window. Removing a photo or item removes it from active Archive; a technical recovery copy may remain for up to 14 days so accidental loss can be repaired. Deleting the account removes its Archive and recovery photos directly. A downloaded Archive backup remains on the user's own computer. Invoices and payment records at Stripe are kept for as long as tax and accounting law requires, currently seven years in the Netherlands.

11International processing

Lumen Tool is operated from the Netherlands, while it is hosted in the United States. Personal data such as technical connection data may therefore be transferred to and processed in the United States.

Lumen Tool uses contractual data-protection safeguards with its service providers, including applicable data processing agreements and Standard Contractual Clauses.

12Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or receive a copy of your personal information, and to object to certain processing or withdraw consent.

You can turn Google Analytics off or on at any time in the analytics settings above, without losing any functionality.

For any privacy request, contact franck@lumentool.com. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

13Children

Lumen Tool is intended for photographers, videographers and people working with light. It is not intended for children, and does not knowingly collect personal information from children.

14Changes to this page

Lumen Tool may update this Privacy & cookies page as the website and tool develop. The latest version will be published here, and the date above shows when it was last changed.

15Contact

For privacy questions, cookie questions or data requests, contact franck@lumentool.com.

Lumen Tool is operated by Tec-Net, registered with the Dutch Chamber of Commerce under number 68341784.