My privacy promise

No accounts, no ads, no trackers

You don't sign in to visit me. I don't run ads, analytics, tracking pixels, or advertising IDs, and I don't sell or share anything about you.

When you write to me

The “Write to Lumi” box is the only place where something you type is saved. When you press Send, I keep:

• the name you typed (optional, up to 60 characters) and your message (up to 1,000 characters),
• the time it arrived,
• the country Cloudflare guesses you're in (just the country, like “SI” or “US”),
• your browser's user-agent string (shortened), so I can tell if something looks broken on a certain device.

I don't store your IP address with your note. To stop spam, your IP address is used as a temporary counter (5 notes per 10 minutes) that deletes itself after 10 minutes.

Notes are stored in Cloudflare Workers KV and are only read privately. There's no public page that shows them. Notes don't expire on their own, so they stay until they're deleted, and I'll delete yours whenever you ask. Please don't put anything sensitive in a note.

No location, no weather

My site doesn’t look up where you are. It doesn’t ask for your location, doesn’t work out your city or region, and doesn’t fetch weather or satellite maps. The little sky on the page just follows the clock on your own device.

On your device

I keep a few tiny things in your browser’s own storage so the page feels like yours, such as your best score in Pip’s little game and which wishes you’ve already made. They never leave your device, and clearing your browser data removes them. I don’t use cookies.

My Android app opens this site in your installed browser (usually Chrome) or a built-in web view. That browser's own privacy settings and policy apply to it. The app asks for internet access only.

Services that help me

• Cloudflare hosts and protects the site. Like any web host, it handles your IP address to deliver pages and may keep short-lived security logs. See Cloudflare's privacy policy.
• Google Fonts serves my rounded “Nunito” font, so your browser contacts Google to download it. See Google's privacy policy.
• Spotify plays Pip’s playlist. The little Spotify player is loaded from Spotify only when you open it (the music button in the arena, or “Play here” on my homepage). Until then nothing is fetched from Spotify. Once it loads, Spotify may set its own cookies and sees your IP address, like any site you visit. See Spotify’s privacy policy. Whether the player was left open is remembered on your device so it stays put between visits.

Pip’s card game

Your cards, Stardust, binder, pet names and progress are saved only in your own browser (local storage). Stardust is pretend and can’t be bought. Pet names are never sent anywhere.

If shared features are on in Parent Corner, the leaderboard and gifts use only a random player id, a nickname picked from preset words, a picture avatar, a win count, an optional group code made of preset words, and the card and preset note inside a gift. No names, emails, ages, or typed messages are collected. Gifts expire after a while, and weekly boards reset. Turn shared features off and nothing is sent.

Kids

Pip’s card game is made for kids to enjoy, ideally with a grown-up nearby. It never asks for personal information. The “Write to Lumi” notes box is for grown-ups, so please don’t let children use it. If a child sent me a note anyway, send me another note through the “Write to Lumi” box and I’ll delete it.

Your choices

Want a note deleted, or have a question? Send me a note through the “Write to Lumi” box on my homepage (the little cloud button in the corner). For a deletion, tell me roughly when you sent the first note and what it said, and I'll remove it. If this policy changes, I'll update it here and change the date below.