We collect only your email address (and optionally your website URL) to manage our waitlist. We don't sell data, share it with advertisers, or use cookies. You can request deletion of your data at any time by emailing us.
Data Controller
The data controller for your personal data is:
Lumastat
Email: [email protected]
Website: lumastat.com
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
What data we collect and why
| Data category | Purpose | Legal basis |
|---|---|---|
| Email address | Notifying you when Lumastat opens access; communicating beta status updates | Art. 6(1)(a) GDPR — consent |
| Website URL (optional) | Better tailoring the product to your needs; prioritising beta access | Art. 6(1)(a) GDPR — consent |
| HTTP request metadata (IP address, browser headers) | Security, spam and abuse prevention; technically required for every connection | Art. 6(1)(f) GDPR — legitimate interests |
We do not collect names, phone numbers, or any special categories of data listed in Art. 9 GDPR.
How long we keep your data
- Waitlist data (email + URL): until the product launches or until you withdraw consent — whichever comes first. After launch we will either migrate you to our customer database or delete your data if you choose not to use the service.
- Server logs (IP, headers): maximum 30 days, after which they are automatically purged.
Who we share data with
We do not sell your data. We may use the following data processors:
- Hosting / infrastructure provider: servers located within the European Economic Area (EEA). Data does not leave the EEA.
- Transactional email provider (e.g. Resend or Mailgun): solely for sending waitlist notifications. Data processed under EU Standard Contractual Clauses.
Each processor is contractually bound to apply appropriate security measures and to process data only for agreed purposes.
Cookies and tracking
lumastat.com uses no cookies whatsoever — not essential, not analytics, not marketing. There is no cookie banner because there is no reason for one.
We do not use Google Analytics, Meta Pixel, or any other third-party tracking script on this site.
Your rights
Under the GDPR you have the following rights:
- Right of access — you may request a copy of the data we hold about you.
- Right to rectification — you may ask us to correct inaccurate data.
- Right to erasure — you may ask us to delete your data from the waitlist at any time.
- Right to restriction — you may request that we pause processing of your data.
- Right to data portability — you may receive your data in a machine-readable format.
- Right to withdraw consent — withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint — you have the right to complain to your national supervisory authority. In the EU you can find your local authority via edpb.europa.eu.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction, including:
- TLS encryption (HTTPS) for all connections.
- Database access restricted to authorised team members only.
- Data stored exclusively on EEA servers.
Third-party links
This site may contain links to external services. This Privacy Policy does not apply to those services. We recommend reviewing the privacy policies of any third-party sites you visit.
Changes to this policy
We may update this document from time to time. For material changes, waitlist subscribers will be notified by email. The date at the top of this page always reflects the latest revision.
Contact
For any privacy questions or requests, please contact us:
Email: [email protected]
We aim to respond within 2 business days.