How Lumstats collects, uses and protects your information. Last updated: 11 June 2026.
Lumstats ("we", "us") operates lumstats.com, a website for recording and sharing love-hums. We are the data controller for the personal data described in this policy. For any privacy question or request, contact us at info@lumstats.com.
Account details — your first and last name, email address, password (stored only as a secure hash, never as readable text), and a general location (country and region). We use these to operate your account, calculate your points and streaks, and place your Lums on the right regional leaderboard. Legal basis: performance of a contract (providing the service you signed up for).
Lum records — the names you enter for the people you lum with, the winner, the measured hum duration, and the date. These appear on leaderboards alongside your general location. Legal basis: performance of a contract. Please only enter another person's name with their agreement — first names or nicknames are fine and encouraged.
Audio recordings — the recording of each hum, used to measure its duration. Recordings are deleted automatically every Monday at 00:00 GMT, except those belonging to the all-time top-ten longest Lums, which are kept and made playable on the leaderboard for as long as they remain in the top ten. Legal basis: performance of a contract.
Cookies — we use a single, strictly necessary session cookie to keep you logged in. We use no analytics, tracking or advertising cookies, so no cookie consent banner is needed.
We do not sell your data, share it with advertisers, profile you, or make automated decisions about you. Precise locations are never collected — only the town/region and country you choose to give.
One technical exception to know about: our pages load fonts from Google Fonts, which means your browser sends your IP address to Google when fetching them. See Google's privacy policy for how they handle this.
Account details and Lum records are kept while your account is active. Audio recordings follow the weekly deletion cycle described above. If you ask us to delete your account, we remove your account details, your Lum records and any stored recordings within 30 days.
Under the UK GDPR and EU GDPR you have the right to: access a copy of your personal data; correct inaccurate data; have your data erased; restrict or object to our processing; and receive your data in a portable format. To exercise any of these, email info@lumstats.com and we will respond within one month.
If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
Passwords are hashed with a modern algorithm, data is transmitted over HTTPS, and recordings are stored with randomised filenames. If we make material changes to this policy, we'll update the date at the top and highlight the change on this page.