Last updated: October 9, 2026
This page explains what data flows through LumaBrowser and lumabyte.com, where it goes, and what you can do about it. The app itself is deliberately quiet: it is open source, and it has no third-party analytics or crash reporting, no account, and no paid plan. The only thing LumaBrowser reports to us is a lightweight version check-in; the rest of its traffic to lumabyte.com is fetching updates, add-ons and a few model files. This one policy covers the app and the website.
Lumabyte, LLC is the data controller for information processed in connection with LumaBrowser and lumabyte.com. We're a US limited liability company. When this policy says "we," "us," or "Lumabyte," it means Lumabyte, LLC.
You can reach us at the address in Section 12.
LumaBrowser runs on your machine. Local models process your prompts and responses on your computer. If you connect cloud models, browse websites, or use external tools and webhooks, the data needed for those requests goes to the services you use. The version check-in and the app's other connections are described below.
No third-party analytics or crash reporting, anywhere. We removed PostHog and Sentry from LumaBrowser entirely, and the lumabyte.com website carries no analytics or crash-reporting scripts either. What does leave your machine is narrow and documented: a periodic version check-in to lumabyte.com (so we can count installs and see version and platform spread), plus requests to fetch updates, optional add-ons and model files. And because LumaBrowser is open source, you can read the code that sends each one.
No account, no payment, no license key. LumaBrowser is free and open source (AGPL) with no paid plan, so we hold no billing data, no license keys, and no machine fingerprints tied to a person. There is nothing to sign up for and nothing to cancel. Organizations that need a commercial license sign an agreement with us by email; it is not handled in the app, and the app never checks for one.
We group the data we touch into buckets. This is the full picture across both the app and the site.
| Bucket | What it contains | Who sees it |
|---|---|---|
| App version check-in (on in packaged builds; off in developer mode) |
A small periodic ping to lumabyte.com/api/pulse (roughly every five minutes while the app is open) so we can count how many installs exist and are currently active, and see version and platform spread for release planning. It carries only: the app version and the platform (e.g. win32, darwin, linux) in the body; a stable machine identifier in a header so the same install is not counted twice (the OS-level machine id: on Windows the MachineGuid registry value, on macOS the IOPlatformUUID, on Linux /var/lib/dbus/machine-id); a short-lived rolling authentication token; and a User-Agent string with the version, architecture, OS release, and Electron version. Nothing else. No events, no feature usage, no URLs, no page content, no prompts, no credentials. The machine identifier is not linked to a name, email, or account, because there are none; it is an anonymous counter key. |
Lumabyte |
| Update, add-on and model requests | Requests the app makes to fetch something: update manifests, the optional add-on catalog and add-on files, and a few model files we host. These carry what any download carries (IP address, user agent, the file requested); the add-on catalog requests also carry the same anonymous machine identifier as the check-in. See Section 4. | Lumabyte, and GitHub for installer files |
| Website logs | Basic Go server logs (IP address, user agent, request path, timestamp) kept for operational and abuse-prevention purposes. The lumabyte.com website loads no third-party analytics or crash-reporting scripts; there is no PostHog, no Sentry, no Google Analytics, and no advertising trackers on the site. |
Lumabyte |
If you email us, or submit a form on the site (for example a waitlist or feedback form), we also hold the email address and whatever you chose to write. That data is used to reply to you and for product planning only.
The version check-in is on by default in a packaged (non-development) build. It is switched off when:
--dev).lumabyte.com/api/pulse at the network layer, for example with a firewall rule.Blocking the check-in does not disable any feature. Local chat, image generation, and everything else run fully offline; the app never needs to reach lumabyte.com after the models are downloaded, and it does not require "good standing" or any periodic contact to keep working.
Besides the check-in, LumaBrowser only reaches out when it needs to fetch something. Each of these is listed so nothing comes as a surprise.
lumabyte.com/install/ whether a newer version exists. Installer files themselves are served from GitHub Releases. You can turn automatic update checks off in Settings.Versions of LumaBrowser before 2.0 included a Template Builder that could send generalized CSS-selector templates (a domain, a URL path without query strings, and a selector map, never page content or form values) to a shared repository on lumabyte.com. LumaBrowser 2.0 removed that feature entirely, and current versions send no templates. Templates contributed by earlier versions are not linked to any user; you can ask us to remove the entries for a specific host + path by emailing the address in Section 12.
We use the data in Section 3 for a short and specific list of purposes:
We do not sell your personal data, and we do not share it with advertisers.
Very few. Because there is no account, no payment, and no license key, we have no payment processor and no licensing service handling your data. A commercial license, if your organization needs one, is a signed agreement handled by email, not by any service in the app. The website and the check-in endpoint run on infrastructure we operate. The source code and installer files are published on GitHub, under GitHub's terms. Model files you download come directly from the model hosts the app names in Setup (for example Hugging Face), under their terms, not through us.
We previously used PostHog (product analytics) and Sentry (crash reporting). Both have been removed entirely, from the LumaBrowser application and from the lumabyte.com website. We no longer send data to either. Earlier versions of this policy also described Stripe (payments) and Keygen.sh (licensing) for planned paid tiers; those tiers were never sold, the Keygen integration has been removed from the app, and neither service receives data from LumaBrowser. If we ever introduce a paid plan, this policy will be updated before it launches.
LLM providers you configure (Anthropic, OpenAI, local models, etc.) are not our processors; they are your processors. You bring your own API keys and your prompts go directly from your LumaBrowser instance to them. Their privacy terms govern that relationship.
Depending on where you live, you may have some or all of the following rights over the personal data we hold about you:
To exercise any of these, email us (see Section 12). We'll respond within a reasonable time, typically 30 days. If you're in the European Economic Area, the UK, or a US state with a comprehensive privacy law (e.g., CCPA/CPRA in California, VCDPA in Virginia, CPA in Colorado), you also have the right to lodge a complaint with your local supervisory authority.
Do Not Sell / Do Not Share (California): We do not sell personal information and do not share it for cross-context behavioral advertising. There is nothing to opt out of on that front.
LumaBrowser is a general-purpose tool for adults and is not directed at children under 13 (or under 16 in jurisdictions where that's the applicable age). Some optional features (roleplay, image generation) can produce mature content and are intended for adults only. We do not knowingly collect personal data from children. If you believe a child has submitted information to us, contact us and we'll delete it.
Lumabyte, LLC operates from the United States. Our service providers are also primarily US-based. If you use LumaBrowser or lumabyte.com from outside the US, your data will be transferred to, processed in, and stored in the United States. Where applicable, we rely on Standard Contractual Clauses or equivalent safeguards for transfers from the EEA, UK, or Switzerland.
We'll update this page when our practices change. The "Last updated" date at the top always reflects the most recent revision. For material changes, we'll post a notice on the site before the change takes effect.
For any privacy question, data-rights request, or template-removal request:
Lumabyte, LLC
Email: [email protected]
Web: lumabyte.com
For contractual terms, see /terms.