Privacy Policy

This Privacy Policy explains how Oddballtrip LLC, a Wyoming (USA) limited liability company operating Lume at lume.travel (“we”, “us”), collects and uses personal data. We are the data controller for the personal data described here. We collect as little as we can — Lume is designed to work without tracking you around.

1. Location data stays on your device

The tour uses your phone's GPS to know when you've reached a stop and to play the right narration. Your location is processed on your device only. We do not collect, transmit, or store your GPS coordinates. The map and audio are downloaded to your phone so the walk itself works offline.

2. What we collect

• Purchase & gift details — the email address (and optional name) you give at checkout or when sending a gift, the city and language, and the amount and currency of your order.
• Payment data — handled directly by our payment processor, Stripe. We receive confirmation of payment and limited metadata; we do not receive or store your full card number.
• Usage & device data — pseudonymous analytics about how the site is used (pages viewed, approximate region, device and browser type), to understand and improve the Service.
• Preferences — your chosen language and currency, stored in your browser so the site remembers them.
• Support messages — anything you send us by email or through a form.

3. Why we use it, and our legal bases

• To deliver your order — send your code, build and deliver your tour, and provide support. Legal basis: performance of a contract.
• To run and improve the Service — analytics, security and fraud prevention. Legal basis: our legitimate interests.
• To meet legal obligations — tax and accounting records. Legal basis: legal obligation.
• Optional messages — where you ask to be notified, we rely on your consent, which you can withdraw at any time.

4. Who we share it with (sub-processors)

We do not sell your personal data. We share it only with the service providers we rely on to run Lume, each acting on our behalf:

• Stripe — payment processing.
• Resend — sending transactional email (your codes, receipts).
• Supabase — database and file hosting.
• Vercel — website and application hosting.
• Google Analytics — pseudonymous usage analytics.

We may also disclose data where required by law or to protect our rights.

5. International transfers

We are based in the United States, and some providers process data in the US and elsewhere. Where personal data of individuals in the European Economic Area or United Kingdom is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

We keep order and email records for as long as needed to provide the Service and to meet legal, tax and accounting obligations, after which they are deleted or anonymized. Analytics data is retained in aggregate. You can ask us to delete your account-level data — see your rights below.

7. Cookies & similar technologies

We use a small number of cookies and local storage: strictly necessary ones to run checkout and remember your language and currency, and analytics cookies to understand usage. You can control cookies through your browser settings.

8. Your rights

Depending on where you live, you have rights over your personal data — under the EU/UK GDPR these include the right to access, correct, delete, restrict, port and object to processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, and we do not sell personal information. To exercise any of these, email hello@lume.travel. EU/UK residents may also lodge a complaint with their local data-protection authority.

9. Children

Lume is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

10. Changes

We may update this Policy from time to time; the “last updated” date above reflects the latest version. Material changes will be posted here.

11. Contact

For any privacy question or request, email hello@lume.travel. Company details are on our imprint.