Cookie Policy
How we use cookies and local storage across our web services — spoiler: it's minimal.
Last updated: March 27, 2026
Table of Contents
2. How Luma Uses Cookies
Luma's web services use a minimal set of cookies. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Here is exactly what we use:
| Name | Type | Duration | Purpose |
|---|---|---|---|
next-auth.session-token | Essential | 30 days | Stores your encrypted Discord session token so you stay logged into the web dashboard. HTTP-only and secure — cannot be read by JavaScript. |
next-auth.csrf-token | Essential | Session | CSRF protection token to prevent cross-site request forgery attacks during authentication. |
next-auth.callback-url | Essential | Session | Remembers where to redirect you after a successful Discord login. |
luma-theme | Preference | 1 year | Stores your light/dark theme preference so it persists across visits. Stored in localStorage, not a cookie. |
4. What We Do NOT Use
Luma's web services do not use:
- Google Analytics or any other analytics platform
- Facebook Pixel or social media tracking cookies
- Advertising or retargeting cookies
- Third-party tracking scripts
- Fingerprinting or device identification technologies
- Any cookies that track you across other websites
The public-facing website (home, commands, status pages) sets no cookies at all unless you log in.
5. Local Storage
In addition to cookies, we use your browser's localStorage to store your theme preference (luma-theme — either "dark" or "light"). This data never leaves your device and is not transmitted to our servers. You can clear it at any time through your browser's developer tools or site settings.
7. Your Consent
By using the Luma web dashboard (i.e. by logging in), you consent to the placement of the essential authentication cookies described in this policy. The public website sets no cookies, so no consent is required to browse it. You may withdraw consent at any time by logging out and clearing your cookies.
8. Changes to This Policy
We may update this Cookie Policy when we make changes to our services. The "Last updated" date at the top of this page will reflect any changes. Since we use only essential cookies, significant changes are unlikely.
9. Contact
Questions about our use of cookies? Contact us at legal@lumabot.app.