Legal

Cookie Policy

How we use cookies and local storage across our web services — spoiler: it's minimal.

Last updated: March 27, 2026

Table of Contents

1. What Are Cookies?2. How Luma Uses Cookies 3. Essential Cookies 4. What We Do NOT Use 5. Local Storage 6. Managing & Deleting Cookies 7. Your Consent 8. Changes to This Policy 9. Contact

1. What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain on your device for a set period).

2. How Luma Uses Cookies

Luma's web services use a minimal set of cookies. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Here is exactly what we use:

Name	Type	Duration	Purpose
`next-auth.session-token`	Essential	30 days	Stores your encrypted Discord session token so you stay logged into the web dashboard. HTTP-only and secure — cannot be read by JavaScript.
`next-auth.csrf-token`	Essential	Session	CSRF protection token to prevent cross-site request forgery attacks during authentication.
`next-auth.callback-url`	Essential	Session	Remembers where to redirect you after a successful Discord login.
`luma-theme`	Preference	1 year	Stores your light/dark theme preference so it persists across visits. Stored in localStorage, not a cookie.

3. Essential Cookies

The authentication cookies listed above are essential to the operation of the web dashboard. Without them, you cannot log in or use any authenticated features (such as managing playlists or controlling the player). These cookies cannot be disabled while using the dashboard. They contain no personally identifiable information — only an encrypted session reference.

4. What We Do NOT Use

Luma's web services do not use:

Google Analytics or any other analytics platform
Facebook Pixel or social media tracking cookies
Advertising or retargeting cookies
Third-party tracking scripts
Fingerprinting or device identification technologies
Any cookies that track you across other websites

The public-facing website (home, commands, status pages) sets no cookies at all unless you log in.

5. Local Storage

In addition to cookies, we use your browser's localStorage to store your theme preference (luma-theme — either "dark" or "light"). This data never leaves your device and is not transmitted to our servers. You can clear it at any time through your browser's developer tools or site settings.

6. Managing & Deleting Cookies

You can control cookies through your browser settings. Most browsers allow you to:

View all cookies currently stored for a site
Delete individual cookies or all cookies for a site
Block cookies from specific sites
Block all third-party cookies
Set cookies to be cleared when you close the browser

Instructions for common browsers:

Note: deleting the authentication session cookie will log you out of the web dashboard. You can log back in at any time via Discord OAuth2.

8. Changes to This Policy

We may update this Cookie Policy when we make changes to our services. The "Last updated" date at the top of this page will reflect any changes. Since we use only essential cookies, significant changes are unlikely.

9. Contact

Questions about our use of cookies? Contact us at legal@lumabot.app.