Log in
Legal

Privacy policy

Last updated 4 November 2026. Written in plain English: if anything's unclear, open a ticket in the Discord.

The short version

  • We collect only what's needed to sell you products, deliver them, keep licences working and stop abuse.
  • We never sell your data, and there are no advertising trackers on this site.
  • Your card details go to Stripe, never to us.
  • Our visitor stats are cookie-free and don't store IP addresses.

LumoRetrac is based in New Zealand, so the Privacy Act 2020 applies. If you're under 18, please read this with a parent or guardian.

What we collect, and why

When you buy

  • Your email and name (from checkout): to send your receipt, keys and login links, and so you can log in to My products.
  • What you bought, when, what you paid, and any code or affiliate link used: to deliver it, handle refunds, pay affiliates and keep tax records.
  • From Stripe: a payment reference and a card fingerprint (a code that identifies a card without its number). We use it only to stop affiliates earning from their own purchases.

When you use an app

  • Your licence key: stored encrypted. We look it up by a one-way code, so a leak of our database wouldn't reveal working keys.
  • A hardware ID: the app turns three hardware details (your PC's system ID, motherboard serial and processor ID) into one-way codes before sending them, so we never see the real values. It's used to keep your licence on one PC and to recognise that PC after a Windows reinstall.
  • The app version, and when the licence was activated, last checked and moved: to keep it working and to enforce the 2-moves-a-month rule.

If you link Discord

  • Your Discord user ID and display name, to give you the Customer and product roles in the LumoRetrac server. Unlinking removes the roles and the link.

If you're an affiliate

  • Your application (name, email, social handles, follower counts, why you want to join), your payout email and method, and your sales and payouts.
  • Clicks on your link are counted with a daily code that can't be turned back into a person or IP address.

When you visit

  • We count page views and daily visitors without cookies. A visitor is a one-way code made from your connection and browser that changes every day; we never store your IP address, and we delete these codes after 90 days.
  • To stop spam and attacks, forms are rate-limited using one-way codes of IP addresses, kept only briefly.
  • Copies of the emails we send you are kept, so we can resend them if you ask.

Cookies

We only use cookies the site needs to work, so there's no cookie banner:

  • Login: keeps you logged in to My products (30 days, or until you log out).
  • Cart and discount code: remember what's in your cart and a code you entered.
  • Affiliate link: if you arrive through an affiliate's link, remembers it for 30 days so they're credited.
  • Discord linking: a short-lived cookie (10 minutes) that keeps linking secure.

Your browser also remembers whether you turned on “Reduce effects”. YouTube and TikTok videos only load when you press play; after that, their own privacy policies apply (YouTube videos use its privacy-enhanced mode).

Who else handles it

We use a few trusted services to run the store. They only get what they need to do their job:

  • Stripe: payments, refunds and fraud checks.
  • Cloudflare: hosts the website, database and downloads, and runs the bot check on some forms (Turnstile).
  • Resend: sends our emails.
  • Discord: only if you link your account.
  • Payhip: for purchases made on our old Payhip store, which we move into your account here.

Some of these services store data outside New Zealand (for example in the United States). We only use providers that protect it properly.

How long we keep it

  • Orders: 7 years, because New Zealand tax law requires business records to be kept that long.
  • Licences: for as long as the licence exists, so your app keeps working.
  • Visitor codes: 90 days. Login links expire after 30 minutes (7 days for the one in your receipt).

Your rights

You can ask us to:

  • show you the personal information we hold about you;
  • correct it if it's wrong;
  • delete it, except what we must keep by law (like tax records). Deleting your data turns off your licences, since we'd no longer know they're yours.

We'll reply within 20 working days. If you're not happy with our answer, you can complain to New Zealand'sOffice of the Privacy Commissioner. If you live in the EU or UK, you have similar rights under your local law, and we'll honour them.

Contact

For anything about your privacy, email support@lumoretrac.com from the address you bought with.