Cookie Policy

This Cookie Policy explains how Lumenshore Limited uses cookies and similar technologies on the LumenDrift website, including the sound-world preview player and early-access form where available. Lumenshore Limited is registered in England and Wales under company number 09607326. Our registered office and contact routes appear in section 21.

You do not need a LumenDrift account to read this website. This policy concerns website technologies and information accessed through your browser. The Privacy Policy separately explains personal-data processing across the website, iPhone app, account services, subscriptions, support, and backend systems.

An iPhone download, a Royal purchase, or an Apple or Google sign-in can involve different storage and providers. Those services are not activated simply by opening this website. Following a link to an external site takes you to a service with its own privacy and cookie arrangements.

A cookie is a small value stored by a browser and returned with matching web requests. A first-party cookie belongs to the site you visit; a third-party cookie belongs to another domain. The domain alone does not determine whether the purpose is necessary or whether consent is required.

Session cookies normally expire when the browser session ends; persistent cookies have a longer expiry. Browser settings, private browsing, storage limits, and tracking protections can remove stored information earlier. A published lifetime is not a guarantee that a browser will retain an item for that long.

Vercel website measurement currently loads during browsing. This website does not present an optional-analytics consent banner, and its Cookie settings panel is an information panel. It does not contain Accept, Reject, or category switches and does not save a consent decision. Opening or closing it does not enable or disable measurement.

Reading a page, continuing to browse, or closing Cookie settings is not recorded as consent. Starting an audio preview requests that particular feature and its security check; it is not recorded as agreement to advertising or additional analytics.

If we introduce a purpose that requires consent, we will describe it and provide an affirmative choice before using it. Where applicable, optional purposes must be off until accepted, rejection must leave the core website available, and withdrawal must be as easy as giving consent. This describes the requirements for a future consent mechanism, not controls already available on this website.

This inventory distinguishes browser storage from information processed on servers. “No application key” means LumenDrift does not create a named cookie or storage entry for that feature; it does not mean no information is processed. Provider security behaviour and ordinary browser caching are explained in their own sections.

The lifetimes below concern a particular token, memory object, or measurement identifier. They are not a single retention period for all information held by LumenDrift or a provider. Section 17 explains the difference and the separate preview-quota cleanup rules.

The LumenDrift website application does not currently set its own account-session, language-preference, advertising, or consent cookie. It has no browser session-replay integration. There are therefore no application cookie names, domains, or expiry periods to list for these purposes.

Vercel Web Analytics operates without an analytics tracking cookie. Necessary page delivery and security still involve network requests and connection information. A hosting or security provider’s infrastructure processing is distinct from cookies deliberately set by our application.

The sound-preview flow uses a Turnstile verification token and a signed media grant. It does not use a cf_clearance cookie as the credential for retrieving audio. Cloudflare’s separately configured pre-clearance mode can issue that cookie; provider-managed security behaviour is described by Cloudflare. We do not label every Cloudflare technology as an advertising tracker or promise that all provider security processing is cookie-free.

This website currently creates no application-owned localStorage entries. In particular, it does not save a consent record, visitor identifier, language preference, listening history, or preview recording in local storage. There is therefore no LumenDrift localStorage key or application-defined expiry period to list.

The Cookie settings panel does not create a preference when you open it or choose Done. Clearing local storage does not reset an analytics switch because no such saved switch exists in the current implementation.

This statement concerns the website application. Browser extensions, developer tools, another site, or a third-party security context can have separate storage behaviour. It also does not describe the iPhone app’s on-device favourites, downloads, or listening history.

This website currently creates no application-owned sessionStorage entries. It does not save campaign parameters in a named session-storage record or record a replay of your browsing session. There is no application session-storage key to delete or renew.

Temporary state still exists while the page is open: for example, the selected preview, playback position, loading status, or an unsubmitted form value. Those values belong to the current interface and are not a persistent listening profile. Browsers may independently restore page or form state after navigation.

Session storage and temporary memory are different mechanisms. The preview token, signed media link, and audio object described below are not placed in sessionStorage by the player.

Your browser may cache public website files, including images, fonts, scripts, and styles, according to response headers and its own settings. This makes repeat loading more efficient. Cache duration depends on the resource and browser; there is no single fixed lifetime for every page file.

LumenDrift does not currently register a website service worker, create an application-managed offline page cache, or provide an offline website audio library. A web-app manifest does not by itself mean a service worker or an offline cache is installed.

Sound-world preview requests use no-store caching instructions. The fetched excerpt is held in a temporary audio object in browser memory. Changing the sound world or removing the player releases the object; pausing playback does not immediately discard it. A signed link may expire while an already loaded clip remains playable from memory.

Clearing cached website files is different from deleting a LumenDrift account or a downloaded sound world in the iPhone app. Browser controls affect data on that browser and device; they do not automatically delete information already held by a service provider.

The website integrates two Vercel measurement services. Their scripts are delivered through the website deployment and currently run without a saved optional-cookie choice. Neither integration is configured to record session replay, custom analytics events, or advertising profiles.

The sound-world player loads Cloudflare Turnstile after you request a preview. Cloudflare processes browser, device, and connection signals, including the IP address, to distinguish legitimate use from automated abuse. Our preview service verifies the resulting token before issuing access to a clip.

Vercel provides website hosting and the visit and performance measurement described above. Cloudflare provides Turnstile and the Worker, private R2 storage, and quota infrastructure used for protected sound previews. Their requests involve the technical information needed to deliver, measure, or secure the relevant service.

When the early-access form is available and you submit it, the website sends your email to the configured registration service. Form submission is a separate processing activity; a server-side rate limit and a hidden anti-spam field protect the endpoint. The form does not create a website cookie or storage preference.

Provider processing can take place outside your country. Our Privacy Policy explains international transfers and the safeguards used where required. A cookie-free measurement service or a first-party script address does not by itself mean the information stays on your device or in your country.

Apple, Google, Clerk, and RevenueCat support other parts of LumenDrift, as described in the Privacy Policy. Their app, account, and purchase services are separate from the browser technologies listed here. The current website does not embed social-media pixels, advertising networks, or session-replay services.

Open Cookie settings from this page or the footer to review necessary operation, website measurement, and preview security. The panel currently reports status only: Done, Close, and Escape dismiss it without recording consent or changing Vercel measurement.

You decide whether to use the preview player. Merely reading the website does not start a preview or its Turnstile check. Once requested, the provider’s script may remain in the page until you leave or reload it; stopping the audio is not a request to erase information already processed by the security provider.

You can review and clear site data or use browser tracking protections and content controls. Blocking scripts can prevent measurement but may also prevent previews or other interactive features from working. Clearing cookies alone does not disable a service that operates without them.

Browser choices normally apply to that browser, profile, and device. They do not automatically synchronise to another browser or the iPhone app. For an objection or a request about personal information already held by us, use the privacy contact routes in section 21.

Use your browser’s site-data controls to inspect or remove information for the LumenDrift domain, or to change cookie and tracking-protection settings. The official guides below explain the current steps. Clearing all browser data can also sign you out of other websites, so select the relevant site if you only want to remove its data.

Browser caches, cookies, and local or session storage are different categories. Removing one does not necessarily remove the others. Private-browsing modes and tracking protections can limit storage duration; browser restoration features can preserve or recreate some session state.

Safari’s tracking protections can restrict or remove website storage independently of an operator’s stated lifetime. These browser protections do not constitute a LumenDrift consent record and do not promise deletion of server-side analytics, security, or registration records.

The current website does not create a local cookie-consent record or send a consent decision to a server-side consent ledger. There is no consent-record key, consent-record identifier, or consent-record expiry to disclose. The document version at the top of this policy identifies this text; it is not proof that you agreed to measurement.

We do not treat a page view, the absence of a privacy signal, a Play action, or dismissal of the information panel as an analytics-consent record. Where consent is required, the service must be able to demonstrate an informed, specific, affirmative choice for the relevant purpose.

If a consent mechanism is introduced, this section will explain exactly what it records, where the record is stored, its validity period, and how rejection and withdrawal are honoured.

Global Privacy Control (GPC) and Do Not Track (DNT) are browser signals expressing a privacy preference. They are distinct from blocking cookies, disabling JavaScript, or deleting site data, and different services can respond to them differently.

The current LumenDrift website does not implement a GPC or DNT check to disable its Vercel integrations. Sending either signal should therefore not be relied upon as a website measurement opt-out here. This disclosure does not limit any privacy rights you may have under applicable law.

LumenDrift does not configure advertising profiles, cross-site behavioural tracking, or session replay on this website. To raise an objection or ask how a privacy preference can be exercised, use the contact and complaints routes below.

In the UK, the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, govern storing information on or accessing information from a user’s device. Where personal data is processed, the UK GDPR and Data Protection Act 2018 also apply. These rules concern the technology’s purpose and use, not only whether it is called a cookie.

Some purposes have specific exceptions to the PECR consent requirement, including strictly necessary uses and qualifying statistical uses subject to conditions. A statistical-purpose exception is not a blanket exemption for every analytics tool and includes information and objection requirements. Where no exception applies, valid consent is required before the storage or access takes place.

Our security checks and requested preview delivery are described separately from measurement in this policy. Describing Vercel as cookieless does not itself establish an exemption or record your consent. Sections 3, 12, 14, and 15 set out the current controls and their limits; we do not claim that an information-only settings panel is a consent mechanism.

There is no single retention period for everything described in this policy. Browser-cache lifetime, verification-token validity, the lifetime of a loaded clip, and server-side record retention are separate. Clearing data on one device does not erase records already sent to a provider.

• Vercel visitor identifier: Vercel states that the Web Analytics visitor-session identifier is discarded after 24 hours. That period does not describe the retention of aggregate reports or every Vercel service record.
• Turnstile token: single use and valid for up to five minutes. Cloudflare’s processing of security signals is governed separately by its privacy notices.
• Signed preview link: valid for 120 seconds after issuance. A clip already loaded into memory can remain there until it is replaced or the player is removed.
• Preview quota records: grant records older than one hour are removed when a later quota request runs. Daily usage counters older than the previous UTC day are also pruned on later requests. Cleanup is triggered by activity, so these are not guaranteed deletion deadlines after a quiet period.
• Website files: ordinary browser caching follows the resource’s instructions and browser settings. There is no application-managed offline sound cache to retain between visits.
• Registrations and other personal information: the Privacy Policy explains the purpose-based retention of account, support, registration, and service records and how to request deletion. Removing cookies or cached files does not cancel an Apple subscription or delete an app account.

We will update this policy when website technologies, purposes, providers, storage lifetimes, or privacy controls materially change. The version and date at the top identify the current document. The policy date does not renew a token, erase stored information, or create consent.

If a future change requires a new consent choice, we will explain that change before using the affected optional technology. We will not treat earlier browsing, a prior unrelated choice, or acceptance of terms as permission for a newly introduced optional purpose.

You can open Cookie settings using a keyboard and move between its controls with Tab or Shift+Tab. Enter or Space activates buttons, and Escape closes the panel in browsers supporting the native popover control. Close and Done are also available as visible buttons. Closing the panel makes no consent decision.

The policy uses numbered headings, labelled navigation, and an expandable contents list on smaller screens. Inventory tables can be scrolled within their own region where needed. Print / save PDF opens your browser’s print function; the print layout removes site navigation and decorative artwork.

If a control or document is difficult to use, the Accessibility page describes the available reporting routes. Include the page, browser, device, assistive technology if relevant, and the action that failed. A privacy request can also be sent by post if the digital controls are inaccessible.

Depending on the law that applies, you may have rights to access, correct, erase, restrict, object to, or receive a copy of personal information, and to withdraw consent where consent is the basis for processing. These rights concern personal information and are not limited to deleting browser cookies. We may need proportionate information to verify a request.

Our Privacy Policy explains how to make a request, including if you cannot sign in. You can raise a concern with Lumenshore Limited using the contact details below. You also have the right to complain to the UK Information Commissioner’s Office (ICO), or another competent supervisory authority where applicable.

The ICO’s website explains its current complaints process. Its helpline is 0303 123 1113. You do not need to use the cookie panel to exercise your rights, and this policy does not require you to give up a right to contact a regulator.

The website operator is Lumenshore Limited, a company registered in England and Wales, company number 09607326. For a question about cookies, browser storage, or a personal-data rights request, use the privacy-request route in the Privacy Policy or write to our registered office.

Postal address: Lumenshore Limited, Windsor House, Troon Way Business Centre, Humberstone Lane, Leicester, England, LE4 9HA. You can use this route even if you do not have a LumenDrift account or cannot sign in.

Identify the LumenDrift website and describe your concern or the right you wish to exercise. You do not need to send passwords, one-time codes, full signed media links, payment details, or unrelated browsing history. If more information is needed to locate relevant records or verify the request, we will explain what is required.