Privacy policy

1. Controller

The data controller for this service is the operator of luranix.win. Contact for privacy requests: support@luranix.win. We do not currently appoint a separate DPO; the same address handles GDPR requests.

2. Data we process

• Account data: username and password hash (no email required today).
• Profile content: display name, bio, location, links, badges, uploaded media (avatar, banner, background, video, audio), Discord connection identifiers if you connect Discord.
• Technical data: session cookies, IP address (for rate limits, security, view dedupe), user-agent, approximate timestamps of activity.
• Usage metrics: public profile view counts and similar aggregate counters.
• Support: whatever you send us by email when you contact support.

3. Purposes & legal bases (GDPR Art. 6)

• Contract / service delivery (Art. 6(1)(b)): create and host your biolink, authenticate you, apply rank limits.
• Legitimate interests (Art. 6(1)(f)): security, abuse prevention, basic analytics of public profile views, improving reliability. You may object where applicable.
• Consent (Art. 6(1)(a)): optional Discord OAuth connection; you can disconnect anytime.
• Legal obligation (Art. 6(1)(c)): when we must retain or disclose data under applicable law.

4. Public profiles

Content you publish on your profile is intentionally public on the internet and may be indexed by search engines. Do not publish special-category data, secrets, or other people’s personal data without a lawful basis.

5. Cookies

We use essential cookies for login sessions and limited anti-abuse measures (for example view-count deduplication). Details: Cookie policy. We do not run third-party advertising cookies.

6. Sharing & processors

We do not sell personal data. We use infrastructure processors as needed to run the site (for example hosting, CDN, DNS such as Cloudflare). Those providers process data on our instructions and under appropriate contracts / SCCs where required for international transfers.

7. International transfers

Servers or edge networks may process data outside your country (including outside the EEA). Where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

8. Retention

• Account and profile data: until you delete the account or we close it for policy/legal reasons.
• Sessions: until expiry, logout, or password reset / suspension.
• IP addresses (signup and profile view logs): retained for 30 days, then deleted or anonymized, unless needed longer for an ongoing abuse or legal investigation.
• Security / rate-limit logs: short periods unless needed for abuse investigations.
• Support emails: as long as needed to resolve your request, then deleted or minimized.

9. Your rights

Depending on your location (EU/EEA, UK, and similar regimes), you may have rights to:

• Access your data
• Rectify inaccurate data
• Erase data (“right to be forgotten”)
• Restrict or object to certain processing
• Data portability (where applicable)
• Withdraw consent (e.g. Discord) without affecting prior lawful processing
• Lodge a complaint with your local supervisory authority

To exercise rights, email support@luranix.win from a channel that helps us verify you control the username (proof of ownership may be required because accounts have no email).

10. Children

The service is not directed at children under 16 (or the higher digital consent age in your country). Do not register if you are under that age.

11. Security

We use industry-standard measures such as hashed passwords, HTTPS, and session controls. No method of transmission or storage is 100% secure.

12. Account recovery

Without an email on file, password reset is manual. Contact support with proof of ownership. Recovery is not guaranteed.

13. Changes

We may update this policy. The “Last updated” date will change. Continued use after material changes means you accept the updated policy where permitted by law.

14. Related

Terms of use · Cookies · Support