Privacy Policy

Lumora is a web-based digital disposable camera for events. A host creates an event and prints a QR code; guests scan it and get a browser camera with 35 frames and no preview. Every photo stays sealed until the host's reveal moment, when the whole event develops into one gallery.

Two kinds of people use Lumora, and they give us very different amounts of information:

Hosts

Sign in with an email address and run the event from a dashboard.

Guests

Scan a QR code and shoot. There is no account, no sign-up, and no email address. A guest is anonymous to us unless they choose to type a display name.

“Personal information” is information that can identify you, such as a name or an email address. Sensitive personal information includes sign-in credentials and payment-related data.

We only collect what the service needs in order to run. Lumora asks guests for no personal information at all; the one optional field is a display name, and it is whatever the guest types.

Host account details

Your email address, and the events you create: event name, dates, timezone, reveal timing, and gallery settings. Lumora has no passwords: you sign in with a six-digit code sent to your email, and neither the code nor your session token is stored in readable form.

Guest device sessions

When a guest opens an event, Lumora creates an anonymous device record and sets a secure, browser-only cookie. It tracks how many of the 35 frames that camera has used. It is not a verified identity and it is not linked to a person, an account, or an email address. Clearing browser storage simply produces a new, empty camera.

Display names

Optional, guest-supplied, and unverified. A display name labels the photos from that camera so the album can credit them. Guests can leave it blank, and a host can clear a name without deleting the photos.

Photos

The images guests capture, plus the resized versions we generate for the gallery. See section 5 for what we remove from them.

Payment data

When a host pays for an event, our payment provider handles the transaction over QRIS. Lumora records the payment reference, amount, and status. We never see or store your card, bank, or wallet credentials.

Cookies and technical data

A session cookie for hosts, a device cookie for guests, and basic operational logs (request timing, errors, and upload outcomes) used to keep the service secure and working. Lumora sets no advertising cookies and runs no third-party ad or analytics trackers.

Running the platform

Authenticating hosts, issuing guest cameras, accepting and processing uploads, enforcing the 35-frame limit, revealing galleries on schedule, and handling payments.

Communication

Sending hosts their sign-in codes and notices about their events. Guests receive no email from us, because we never have their address.

Service providers

We work with third parties only as far as running the service requires: Cloudflare R2 for image storage and delivery, Resend for host email, and our QRIS payment provider.

Lawful disclosure

We may disclose information where required by law, or to protect the rights and safety of people using Lumora.

We do not sell your personal information, and we do not use your photos to train machine-learning models or for our own marketing without asking you first.

Photos have their own rules:

• Location is removed. Before any photo reaches a gallery, we strip its EXIF metadata, including GPS coordinates and camera details. The version other people see does not carry where it was taken.
• Nothing is visible early. Frames stay sealed until the host's reveal moment. Guests cannot see their own shots before then either.
• The host is the moderator. Hosts can see every photo in their event, hide any photo, delete any photo permanently, and download every photo. Guests can report a photo, which raises it for the host to review.
• Guests get gallery copies. Hosts can download every photo from their event. When a host enables guest downloads, guests can save photos too.
• Galleries are not public.A gallery is reached by an unlisted link or protected by a passcode, at the host's choice. Lumora does not list events publicly or index them for search engines.

An event's media is retained for 30 days after the event starts. After that, retention cleanup permanently deletes the photos, the gallery versions, and the guest display names attached to them. The clock runs from the moment the cameras open. A host can end gallery availability earlier, but cannot extend storage beyond this period.

Hosts should download the photos they want to keep before that window ends. Deletion is permanent, and we cannot restore an expired event.

Host account records and payment references are kept while the account exists and for as long as we need them for accounting.

You can disable cookies in your browser settings, though Lumora will not work properly without them, because the guest camera and the host session both depend on a cookie to know which camera or account they belong to.

Hosts can edit or delete their events from the dashboard, and can ask us to delete their account. Guests who want a photo removed should use the report control in the gallery, which raises it with the host, or contact the host directly. The host controls their own event.

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal information. Contact us at myansstudio@gmail.com to exercise these rights.

For anonymous guest cameras there is often nothing for us to look up, as we hold no name, email, or account for them, so please tell us the event and roughly when you were shooting.

We apply reasonable security measures: sign-in codes and session tokens are stored only as hashes, uploads go straight to storage using short-lived authorised URLs, and gallery access is gated by unlisted tokens or a passcode. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Lumora is not directed at children, and we do not knowingly collect personal information from them. Events are often family occasions and guests may photograph children; hosts are responsible for the people they invite and for anything they choose to share from their gallery.

We may update this Privacy Policy from time to time. Continued use of the service means you accept the changes. The revision date at the top of this page always reflects the current version.

If you have questions about this Privacy Policy, reach us at myansstudio@gmail.com. You may also want the Terms of Service or the FAQ.