Cookie Policy

Cookies are small text files placed on your device by websites and web applications you visit. They are widely used to make websites work efficiently, provide useful features, and give site operators information about how visitors use their services.

In addition to cookies, Lumiqo may use similar technologies such as pixel tags, web beacons, local storage, and session storage. References to “cookies” in this policy include all such technologies unless stated otherwise.

Lumiqo uses cookies for the following purposes:

• Authentication: Securely identifying your session and keeping you signed in to the console
• Security: CSRF protection, fraud detection, and session integrity validation
• Preferences: Remembering your settings such as theme, language, and dashboard layout
• Performance: Measuring page load times, API response latency, and infrastructure performance
• Analytics: Understanding how you use the platform to improve product features
• Marketing: Personalising content and measuring the effectiveness of campaigns (opt-in only)

Essential / Strictly Necessary

These cookies are required for the Services to function and cannot be disabled. They include:

• lq_session: Encrypted session token for authentication (HttpOnly, Secure, SameSite=Strict) — expires on session end
• lq_csrf: Cross-site request forgery protection token — expires on session end
• lq_consent: Stores your cookie consent preferences — expires after 12 months

Functional / Preference

These cookies enhance your experience by remembering your choices and settings. They do not track you across third-party sites.

• lq_theme: Your selected UI theme (dark/light) — expires after 12 months
• lq_prefs: Dashboard layout and column preferences — expires after 6 months
• lq_onboarding: Tracks onboarding completion steps — expires after 30 days

Analytics & Performance

These cookies help us understand how users interact with the platform so we can improve it. All analytics data is aggregated and does not identify individual users.

• ph_* (PostHog): Self-hosted product analytics — session and feature engagement tracking; expires after 12 months
• _vercel_speed_insights: Core Web Vitals and page performance data — expires after 30 days

Marketing & Advertising

We use marketing cookies only if you have explicitly opted in via our consent banner. These cookies may track you across websites and are used to personalise Lumiqo marketing communications.

• _ga, _gid (Google Analytics): Traffic source and campaign attribution — expires after 2 years / 24 hours respectively
• intercom-*: In-app messaging and support targeting — expires after 9 months

Some cookies on our platform are set by third-party services we use to deliver features. These third parties have their own privacy policies governing their use of cookies:

• Stripe: Fraud detection and payment security — stripe.com/privacy
• Intercom: Customer support and in-app messaging — intercom.com/terms-and-policies
• Google: Analytics and reCAPTCHA — policies.google.com/privacy

Lumiqo does not control third-party cookies. Please review the respective privacy policies for details on how those third parties use your data.

Cookie Consent Banner

When you first visit lumiqo.app or console.lumiqo.app, our cookie consent banner allows you to accept all cookies, reject non-essential cookies, or customise your preferences by category. You can update these preferences at any time by clicking “Cookie Settings” in the footer.

Browser Settings

All modern browsers allow you to control cookies through their settings. Note that disabling cookies entirely may impair the functionality of the Lumiqo console, including authentication and dashboard preferences. Below are links to cookie management guides for major browsers:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions > Cookies and site data

Opt-Out of Analytics

To opt out of PostHog analytics, you may use the “Do Not Track” (DNT) browser signal, or email privacy@lumiqo.app to request opt-out. We honour DNT signals on our marketing website.

Lumiqo uses both session and persistent cookies:

• Session cookies: Temporary cookies that expire when you close your browser. Used for authentication tokens and CSRF protection.
• Persistent cookies: Stored on your device for a defined period (see the Cookie Categories section). Used for preferences, analytics, and marketing.

Cookie expiry periods are reviewed periodically and updated to comply with applicable regulations, including the EU's ePrivacy Directive.

We may update this Cookie Policy when we introduce new cookies, change the purpose of existing cookies, or to comply with new regulatory requirements. We will update the “Last Updated” date and, for material changes, re-display the consent banner to obtain fresh consent where required.

For questions about our use of cookies, contact privacy@lumiqo.app. For general legal enquiries: legal@lumiqo.app.