Privacy Policy

This policy explains what information Lumen collects when you use the Lumen client, launcher, Discord bot and website at getlumen.cc, and what we do with it. The short version: we collect what we need to issue keys, tie a key to one PC and stop abuse. We do not sell your data, show ads, or run analytics or tracking on the website.

What we collect

From the Discord bot

When you use the bot to claim a trial or redeem a key, we store:

your Discord user ID;
when you first used the bot and when you last claimed a trial;
which keys you claimed or redeemed, and when.

We do not store your Discord username, messages, email address or server list.

Payments

Premium keys are sold by authorized resellers. The reseller handles your payment and any details you give them under their own privacy policy. Lumen does not receive your card, bank or billing details.

From the launcher

When you log in with a key, the launcher sends:

the key. We store only a hash of it and its first few characters, so a stolen database does not reveal working keys;
a hardware fingerprint made of three parts: the Windows machine ID, the motherboard’s system UUID and the system disk’s serial number. Each one is hashed on your PC before it is sent, and we hash it again with a secret key on the server. The raw values never leave your PC. We use the fingerprint to bind a key to one PC and to enforce PC bans;
your PC’s name as Windows reports it (for example DESKTOP-AB12CD3), so staff can tell your PCs apart when helping you;
the launcher version.

While you play, the client and launcher check in with the server every few minutes. For each session we store when it started and ended, the client version, the game’s process ID, the time of the last check-in and why it ended. We also record security events, such as a login token being reused or a key appearing on a different PC.

From every request

Our servers see your IP address with each request, as every web server does. We use it to rate-limit requests and stop abuse. It appears in our server’s request logs, which our hosting provider keeps for a limited time. We do not store IP addresses in our database or tie them to your key.

From the website

The website is a set of static pages. It sets no cookies and runs no analytics, ads or third-party trackers. The host records standard request logs (IP address, page requested, time).

What stays on your PC

Your login is kept in Windows Credential Manager under your Windows account. Your key itself is not kept after you log in.
Configs, settings and crash logs are stored in the Lumen folders under %APPDATA% and %LOCALAPPDATA% and are not uploaded.
We do not collect your Minecraft or Xbox account details, chat, gameplay, screenshots, files or browsing history.

Third-party features

Some client features talk to other services only when you use them. The Spotify feature connects to Spotify with an account you authorize. Statistics features for public servers, such as The Hive, send player names to that server’s public API. Links to Discord take you to Discord. Those services handle your data under their own privacy policies.

How we use it

To issue, validate and expire keys, and to bind each key to one PC.
To deliver the client and updates to licensed users.
To detect and stop key sharing, reselling, cracking, trial abuse and attacks.
To help you when you ask staff for support.

We do not use your data for advertising or profiling, and we do not sell or rent it.

Hosting: our servers, database and website run on Railway, which stores the data on our behalf.
Discord: the bot runs through Discord’s platform, which sees your interactions with it under Discord’s own policy.
Legal reasons: we may disclose information if the law requires it, or to protect the Service, our users or the public from fraud or abuse.

How long we keep it

We keep key, device and session records while your key is active and afterward for as long as we need them to enforce bans and prevent abuse. Records of a PC ban are kept while the ban is in effect. Server request logs are kept by our host for a limited period and then deleted. You can ask us to delete your data at any time, as described below.

Your choices and rights

You can ask us to show you, correct or delete the data we hold about your Discord account or key. Message the staff in the Lumen Discord and include your Discord ID or key prefix. Deleting your data ends any active key tied to it. We may keep the minimum needed to enforce an active ban.

Depending on where you live, such as the EU, UK or California, you may have further rights, including to object to processing or to complain to a data protection authority. We process this data because it is needed to provide the Service you asked for and because we have a legitimate interest in preventing abuse.

To remove what is on your PC, uninstall Lumen and delete those Lumen folders.

Security

Keys are stored only as hashes, hardware identifiers are hashed twice, logins use short-lived tokens that rotate, and traffic to our servers is encrypted with HTTPS. No system is perfectly secure, but we limit what we keep so that less is at risk.

Children

Lumen is not meant for children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has used the Service, contact us and we will delete their data.

International users

Our servers are hosted in the United States or other countries where our provider operates. Using the Service means your data may be processed outside your own country.

Changes

We may update this policy. The date at the top shows the latest version, and significant changes will be announced in our Discord.

Contact

Privacy questions and requests go to the staff in the Lumen Discord.