Cookie Notice
Storage inventory
| Name | Type | Purpose | Duration |
|---|---|---|---|
| lumina_session | Cookie (HttpOnly, Secure) | Keeps you signed in to your workspace. | Session / configured session lifetime |
| lumina_done_<formId> | Cookie (HttpOnly) | Remembers that you completed a public form so you cannot submit it twice (only set when the form owner enabled duplicate prevention). | 12 months |
| Turnstile challenge cookies (cf_chl*, __cf_bm) | Third-party security cookies, set by Cloudflare | Distinguishes humans from bots on sign-in and registration. | Minutes |
| Interface preference keys (notification sound, focus mode, table columns, starred submissions) | localStorage (first-party) | Remembers your dashboard interface preferences. | Until cleared |
| Form progress, payment step, and campaign context keys | sessionStorage (first-party) | Restores in-progress form answers, the payment step, and campaign attribution within the same browsing session. | Cleared when the tab closes |
Why there is no consent banner
Every item above is either strictly necessary to deliver the service you requested (authentication, duplicate-submission prevention, in-progress answers) or a security measure (bot detection on sign-in and registration). Under the EU ePrivacy Directive and GDPR, such storage does not require prior consent — but it does require transparency, which is what this page provides. If we ever add optional analytics or advertising storage, we will present a consent choice before setting it.
Your controls
You can clear or block cookies and site data in your browser settings at any time. Doing so signs you out, forgets interface preferences, and allows a public form you already completed to be submitted again from that browser.
Questions
Privacy questions: legal@luminaforms.app.