Your library.
Your information.

1. Summary and who we are

Lumière is developed by independent developer Artem Svitelskyi, who is the data controller for the limited data described here. Contact: a.svitelskyi@gmail.com.

This policy covers the Lumière apps for Apple TV, Mac, iPhone, and iPad, the free Lumière Server software, and the website at lumiere.artsvit.com.

We do not run Lumière accounts, and we do not host a media server for you. The apps and Lumière Server contain no advertising, tracking, or analytics. We do not receive what you watch, your files, your server addresses, or your passwords. We do not sell or share personal data.

2. Data stored on your device

The Lumière app keeps this data on your device:

• Server connections: addresses, ports, usernames, and chosen libraries.
• Credentials: passwords and tokens, in Apple Keychain. If you turn on Sync with iCloud, they are also in iCloud Keychain (see section 3).
• Viewing data: recent items, resume positions, watched state, and favorites.
• Cache: artwork and title details from your servers.
• Settings: your app preferences.
• Plan and device checks: your plan and its end date, a random device identifier, a security key that protects the saved plan, and the time of your last device switch. These are not sent to us.

3. iCloud

Lumière uses your iCloud account only for the items below. Your media and viewing history are not stored in iCloud by Lumière.

• Device limit: to apply the Free limit of two devices, Lumière keeps a random device identifier, the time that device last claimed a slot, and the time of the last device switch in your iCloud key-value storage. A device's registration expires after 30 days without use.
• Server names: a name that you give to a server is kept in your iCloud key-value storage, so your devices show the same name. It is saved under a code made from the server's details, not under its address.
• Sync with iCloud: this is off until you turn it on, on each device, in Settings → Servers. While it is on, the app keeps the list of your saved servers in your iCloud key-value storage: the kind of server, its name, address and port, its server identifier, your username, and your chosen libraries. The passwords and tokens of these servers are kept in iCloud Keychain, which Apple protects with end-to-end encryption. Every device signed in to the same iCloud account that has Sync with iCloud on receives this list and these sign-ins.
• Removed servers: when you remove a server while Sync with iCloud is on, it is removed from all your devices that sync. A short note that it was removed stays in iCloud for 90 days, so a device that was offline also removes it.

Apple runs iCloud under its own terms. The data goes from your devices to Apple, not to us, and we cannot read it. If you turn Sync with iCloud off, that device stops syncing. The list already in iCloud stays there until you remove those servers on a device where sync is on.

4. Where the app sends data

The app sends data only as needed for the feature you use:

• Your servers and shared folders: your IP address, credentials, the items you open, and, where supported, playback progress and watched status. The operator of that server controls this data and may keep it. This may be someone else if you use a shared server.
• Plex: if you use Plex sign-in, the app contacts plex.tv to link your account and find your servers.
• YouTube: trailers and some trailer thumbnails can load from YouTube, or open in its app or website. YouTube can receive your IP address and device details.
• TMDB, TVmaze, and Wikimedia Commons: if your server supplies their artwork, the app can load images from image.tmdb.org, static.tvmaze.com, or upload.wikimedia.org. These services can receive your IP address.
• Apple: the App Store handles purchases, and Apple may share crash reports with us if you agreed to this in your device settings. Those reports contain no account details that identify you to us.
• Demo mode: the App Review demo plays Apple sample video from an Apple server.

Connections go directly from your device to these services, not through us. HTTP and other unencrypted connections, which you must choose yourself, are not protected in transit. Use HTTPS or a private network when you can.

5. Lumière Server

Lumière Server is software that you install and run on your own computer or NAS. We do not host it and we cannot reach it. It has no account, no registration, and no license check. It sends no usage data, statistics, or crash reports to us.

The server keeps this data on your machine, in its settings folder:

• Settings: your preferences and the TMDB, OMDb, and AcoustID keys that you add.
• Library data: the list of your files, the title that matches each file, and saved posters and details.
• Viewing data: favorites, resume positions, and watched state. The server keeps one shared set for everyone who uses it.
• Intro data: sound fingerprints of episodes, used to find intros.
• Music data: the songs, albums, and covers of your music folders, with the names that the server found for songs without tags.

The server contacts these services only for the features you use:

• TMDB: with your own API key, the server sends titles and years taken from your file and folder names, and loads posters and details. TMDB receives your key and the IP address of your network.
• Open sources (Wikidata, Wikipedia, TVmaze, and Wikimedia Commons): only while no TMDB key is set. The server sends titles and years taken from your file and folder names, and the identifiers of the titles it finds. It sends no key and no account details. These services receive the IP address of your network and a User-Agent that names Lumière Server, its version, and this website. To turn them off, start the server with LUMIERE_OPEN_METADATA=0.
• OMDb: with your own API key, the server sends the IMDb identifier of a title to load its scores.
• AcoustID: only for songs that have no tags, and only after you add your own AcoustID key. The server sends a short audio fingerprint of the song, its length, and your key. It does not send the song file, its name, or its path. AcoustID receives your key and the IP address of your network. It answers with a title, artist, and album from MusicBrainz.
• Cover Art Archive: the server asks for the front cover of an album that AcoustID found. The archive receives the album identifier and the IP address of your network.
• YouTube: the server gets trailer links from TMDB and does not contact YouTube itself. The web page plays a trailer in YouTube's player, loaded from youtube.com and youtube-nocookie.com. YouTube receives the IP address of your browser.
• Docker Hub: when you install or update the server image, Docker receives your IP address.
• GitHub: a few times a day, while update checks are on, the server reads the version file of the latest release from github.com. When you get the desktop app or a new version of it, the file comes from GitHub too. GitHub receives the IP address of your network.

The Lumière apps never contact AcoustID, MusicBrainz, the Cover Art Archive, Wikidata, or Wikipedia. They talk only to your server. We do not receive any of this data.

The server's web page sets no cookies. It keeps a few preferences in your browser's local storage: language, theme, player volume, and the intro setting. Posters that the server has not saved yet can load in your browser from image.tmdb.org, static.tvmaze.com, or upload.wikimedia.org.

Lumière Server has no password of its own. Anyone who can reach it on your network can see the library and the viewing data, and can change settings. Run it on a network you trust, and do not open it to the internet. If other people use your server, you decide what happens with their viewing data, and you are responsible for it.

6. App Store purchases

Apple processes all Lumière Plus purchases through StoreKit. We do not receive your card details, billing address, or Apple Account password. The app checks signed purchase records on your device, and these checks send nothing to us. App Store Connect gives developers sales reports that do not identify you to us.

7. Your choices and deletion

You control the data on your devices:

• Servers: remove a saved server in Settings. This deletes its connection details and its credentials from Keychain. While Sync with iCloud is on, this also removes the server and its sign-in from iCloud and from all your devices that sync.
• Sync with iCloud: turn it on or off on each device in Settings → Servers.
• History: use Clear viewing history in Settings.
• Uninstalling: deleting the app removes its local data. Keychain items, including the random device identifier, may stay on the device, so a reinstall can count as the same device.
• Server data: delete it on the server itself, or ask its administrator.
• Lumière Server: clear saved posters and matches in its Settings. To remove everything, stop the server and delete its settings folder. This does not delete your media files.

8. Website, cookies, and browser storage

The website at lumiere.artsvit.com sets no cookies. It has no analytics, advertising, tracking, external fonts, or scripts from other companies. Because nothing on the site needs your consent, the site does not ask you to accept or reject cookies.

The site shows a short privacy notice on your first visit. When you close it, the site saves one item named lumiere-privacy-notice in your browser's local storage, so the notice stays closed. This item holds no identifier, is never sent to us, and is needed only for that purpose. You can delete it in your browser settings at any time.

The site is delivered through Cloudflare, Inc. Cloudflare and our hosting provider process standard request data for security and reliability: your IP address, browser details, and the pages you request. They can process this data outside your country, including in the United States, under their own safeguards such as the EU-U.S. Data Privacy Framework and standard contractual clauses. We do not combine this data with anything else, and we do not use it to identify you.

Links to the App Store, Docker, TMDB, TVmaze, Wikipedia, Wikidata, AcoustID, MusicBrainz, and other sites take you to those companies, under their policies.

9. Support email

If you email us, we receive your address and whatever you include. We use it only to answer you. We keep it for as long as needed for that purpose, normally no longer than two years after the last message, unless the law requires longer. Email is delivered through our mail provider. Please do not send passwords or tokens.

10. Your rights

Depending on where you live, including under the GDPR, the UK GDPR, and California law, you have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict its use. To use a right, email us. We answer within one month. You can also complain to the data protection authority where you live.

Where the GDPR applies, our legal bases are:

• Legitimate interests: request logs that keep the website secure and reliable, and answers to your email.
• Contract: providing the app, Lumière Plus, and support that you ask for.
• Legal duty: records that tax or consumer law requires.

We do not ask for consent, because we do no tracking or marketing. We make no automated decisions about you and do no profiling. We do not sell personal data or share it for advertising.

We hold almost no data about you, usually only support emails, so most requests are simplest to handle on your own device or server. Our mail and hosting providers may process data outside your country, under their own safeguards.

11. Children

Lumière is not directed at children under 13, or the higher minimum age where you live, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it. Parents should use Apple's Screen Time and their server's own controls to manage access to content.

12. Changes and contact

We may update this policy when the apps, Lumière Server, the website, or the law changes. The date at the top shows the latest version. Questions: a.svitelskyi@gmail.com.