Legal
Privacy policy
This policy describes what The operator of 0r834h.duckdns.org ("we") processes when you use Lumen Secure, written to match what the software actually does.
1. The short version
- Messages and files in encrypted rooms (the default) are encrypted on your devices. We cannot read them.
- We process account data (username, email, sign-in records) and messaging metadata (who is in which room, when) to run the service.
- We don't sell data, show ads, or use analytics trackers. No third-party scripts run on our pages.
2. Data we process
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Account | Username, display name, email, password hash (Argon2id), MFA authenticators | Provide and secure your account | Until you delete your account (+ 7-day cancellation window) |
| Security records | Sign-in events, IP address, browser user agent, rate-limit events | Detect abuse and show you your own security history | 90 days |
| Operator audit log | Actions taken by our staff on accounts and settings | Accountability | 365 days |
| Messaging (encrypted) | Encrypted messages and files, encrypted key backup | Deliver and store your conversations | Until deleted by participants or the account is erased; copies on other federated servers follow their policies |
| Messaging metadata | Room membership, event timestamps, room names/topics, device list, last-seen IP | Route messages and run the Matrix protocol | As long as the room or device exists |
| Workspaces & billing | Workspace name, members, plan, invoices (amounts, dates) | Provide paid plans | While the workspace exists; invoices as required by law |
| Support | Messages you send us | Answer your request | 365 days after the ticket is closed |
| Backups | Encrypted copies of the above | Disaster recovery | Rolling; see the operator's backup retention setting |
3. Federation
When you join a room that includes people on other Matrix servers, those servers receive the room's events — encrypted message content plus the metadata listed above — and store them under their own policies. That is how federation works; we cannot delete data from other servers.
4. Processors
If online payments are enabled, Stripe processes payment details as our processor; card numbers never reach our servers. If email is enabled, our email provider processes the messages we send you. We use no other third parties to process your data.
5. Your rights
You can view and export your account data and delete your account from the Privacy & data page. Account deletion deactivates your Matrix account, asks other servers to forget your profile, and removes your account data after the cancellation window. For other requests contact test@msn.com.
6. Security
See our security page for how data is protected, and its limits.
7. Changes
We'll announce material changes in the app and on this page before they take effect.
Operator: The operator of 0r834h.duckdns.org. Operators deploying Lumen must review this policy with counsel and adapt it to their jurisdiction.