Website privacy policy
This page is about the lucium.app website. For what the browser does, see Privacy.
What the website does not do
- The website sets no cookie.
- No ads, no advertising tracker, no tracking from one site to another.
- No font, image or video from another domain. Only the script of the audience measurement comes from elsewhere, from stats.consilioweb.fr (below).
Audience measurement
The website counts its visits with Umami, a free and open-source analytics tool that uses no cookies, hosted by ConsilioWEB at stats.consilioweb.fr. For each page viewed, it receives the address of the page without its parameters, the site you came from, the language, the type of device, the browser, the system and the country derived from the IP address. The IP address is not kept, and nothing is stored on your device. To group the pages of one visit, Umami computes a fingerprint from the IP address and the browser, renewed every month.
If your browser asks not to be tracked (“Do Not Track”), nothing is sent. These figures only tell us which pages are read; they are neither sold nor shared.
Server logs
The website’s server keeps no log of visits. To limit abuse, it keeps in memory, for an hour at most, the IP address of anyone who sends a suggestion, asks for a code or votes; the website does not write it to disk. The proxy of the server keeps no log of visits either; its error logs, which may hold the IP address of a failed connection, are limited to three files of 10 MB and overwritten as they go.
The community: suggestions and votes
To vote for or suggest an idea on the site, you confirm your email address with a six-digit code. We keep that address, a fingerprint of its normalized form that lets us accept only one vote per person and per idea, and the language of the page you asked for the code from, so that we write it to you in that language, until you ask us to erase it. Your browser keeps a sign-in token valid for 30 days in its local storage; no cookie is set. For each vote, we keep the idea it is for and a fingerprint of your network, computed from your IP address with a secret key: the IP address itself is never recorded, and that fingerprint, used to spot repeated votes, is erased after 30 days. Suggestions are reviewed before they are published; the title and text of a published suggestion become public, never your address. The site uses no audience measurement and no telemetry. You can withdraw a vote at any time from the site. To erase your address, your votes and your suggestions awaiting review, write to contact@lucium.app from that address: we delete that data and correct the vote counts. Suggestions already published stay online, with no link to you.
Storage in your browser
Once your address is confirmed, a token is kept in your browser’s local storage for 30 days, so you can vote without asking for a new code. “Sign out on this device”, on the Community page, erases it. Nothing else is kept.
Your rights
You can ask to access, correct or erase your data, and object to its processing, by writing to contact@lucium.app. You can also complain to the CNIL, the French data protection authority (cnil.fr).
Data controller
CONSILIOWEB, see the legal notice.