Lumodeck

Lumodeck Beta Privacy Policy

Effective date: October 14, 2026
Last updated: October 14, 2026

This Beta Privacy Policy explains what personal information Lumodeck ("Lumodeck", "we", "us" or "our") collects when you use getlumodeck.com and related services (the "Service"), how we use and share it, and the choices you have.

1. Information we collect

Information you give us

  • Account information: your email address and the authentication data needed to sign you in (such as a hashed password or sign-in tokens). Accounts are managed through our provider Supabase.
  • Deck content: deck titles, descriptions, card text, imported material and any other content you create or upload.
  • AI prompts: the topic, instructions and deck details you send when you ask for AI suggestions, and the suggestions that come back.
  • Support messages: what you send us at support@getlumodeck.com.

Order information

  • When you order a printed deck, Shopify collects your name, email, shipping address, order details and payment information at checkout. Our print partner, The Game Crafter, receives your shipping details and the deck's card text and artwork to print and ship the order.
  • We receive order details (such as the order reference, items, shipping address and order status) so we can fulfil your order and provide support. We don't receive or store full payment card numbers.

Information collected automatically

  • Technical and log data: IP address, browser and device type, pages visited and timestamps, collected by our hosting provider Vercel and by our systems for security and operations.
  • Cookies: we use essential cookies to keep you signed in and keep the site working.
  • Analytics and error monitoring: we may use analytics and error-monitoring service providers to understand how the Service is used and to find and fix problems. These may collect usage and technical data, such as pages visited, actions taken, device and browser information, and error reports.

2. How we use information

We use personal information to:

  • create and run your account, and sign you in;
  • store, display and let you study your decks;
  • generate AI suggestions when you ask for them;
  • show public decks on /explore;
  • process, print, ship and support orders, including reprints and refunds;
  • respond to support, takedown and privacy requests;
  • manage invite-only beta access;
  • keep the Service secure, prevent abuse and fraud, and enforce our Terms;
  • understand how the Service is used and improve it; and
  • comply with legal obligations.

We send service emails, such as sign-in, account and order messages.

3. We don't sell your personal data

We don't sell your personal information.

4. How we share information

We share personal information only as needed to run the Service, with these service providers:

  • Supabase: accounts, authentication, database and file storage (account email, authentication data, deck content and order records).
  • Vercel: website hosting and delivery (technical and log data).
  • OpenAI: AI card suggestions (the AI prompts and deck details you send, and the suggestions returned).
  • Shopify: checkout and payments (name, email, shipping address, and order and payment details).
  • The Game Crafter: printing and shipping decks (shipping details, order details, and deck card text and artwork).
  • Analytics and error-monitoring providers, if we use them (usage, technical and error data).

We may also share information (a) when required by law or legal process, (b) to protect the rights, safety or property of Lumodeck, our users or others, (c) as part of a merger, acquisition or sale of assets, or (d) with your consent.

5. AI suggestions (OpenAI)

AI suggestions are powered by the OpenAI API. When you use them, the content of your request (your prompt and the deck details we include, such as the title and description) is sent to OpenAI to generate cards. Data sent through the OpenAI API isn't used to train OpenAI's models. Please don't include personal or sensitive information in AI prompts.

6. Public decks

Decks you publish are visible to anyone, including people without an account, and others can order them as prints. Public decks may also be found by search engines or shared by link. If you unpublish or delete a deck, we remove it from /explore, but copies that others have already seen, saved or ordered can't be recalled.

7. How long we keep information

We keep personal information for as long as needed to provide the Service and meet our legal obligations, such as tax and accounting requirements for orders. Deleted data may remain in backups for a limited time before it's overwritten.

8. Your choices and rights

  • Access, correction and deletion: you can ask to see, correct or delete your personal information, or delete your account, by emailing support@getlumodeck.com from the email address on your account. We'll verify your request before acting on it.
  • You can edit or delete your decks, and unpublish public decks, in the app at any time.
  • Depending on where you live, you may have rights to know what personal information we hold about you, access it, correct it, delete it, receive a copy of it, object to or restrict certain uses of it, and withdraw consent you've given. You also have the right not to be treated differently for exercising these rights, and you may be able to complain to your local data protection authority. To make a request, email support@getlumodeck.com.
  • We may keep some information where we need it for legal reasons, to complete orders or to resolve disputes.

9. Children's privacy

Lumodeck is for users 13 and older. Users under 18 need a parent or guardian's permission. We don't knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we'll delete it and close the account. If you believe a child under 13 has given us information, please contact support@getlumodeck.com.

10. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and access controls. No system is perfectly secure, and the Service is a beta, so we can't guarantee absolute security. If we learn of a breach that affects your information, we'll notify you as required by law.

11. Where data is processed

Data is processed in the United States. If you use Lumodeck from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those where you live.

12. Changes to this policy

We may update this Beta Privacy Policy. If a change is material, we'll let you know by email or in the app before it takes effect. The "Last updated" date shows when it last changed.

13. Contact us

Privacy questions and requests: support@getlumodeck.com