Lumen

Privacy Policy

Last updated: June 15, 2026

Lumen ("the Extension") is a Chrome DevTools AI assistant developed by Vladimir Sebian. This Privacy Policy describes what data the Extension collects, how it is used, stored, and shared, and what choices you have. It applies to the Lumen Chrome extension and the Lumen website.

Summary of data we handle: the Extension collects personally identifiable information (your email address), user activity (console errors and network requests from a page you choose to debug), and website content (DOM elements and page content you explicitly attach to an AI request). We do not collect health, financial, location, web-history, or personal-communication data. Full detail is in Section 1 below.

Chrome Web Store — Limited Use disclosure

Lumen's collection, use, and transfer of all user data — including any information received from Google APIs such as Firebase Authentication and the Google Gemini API — adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this data only to provide and improve the Extension's user-facing features. We do not sell user data, do not use it for advertising or to build user profiles, and do not transfer it to third parties except as needed to operate the features described below or where required by law.

1. Data We Collect

The following table summarises every category of data the Extension handles:

Data type	Collected?	Purpose	Stored where
Email address	Yes	Account creation, authentication, sending activation codes	Cloudflare D1 database (our servers)
Activation / licence code	Yes	Verifying access to paid features	Stored locally in `chrome.storage.local` on your device; also in our Cloudflare D1 database
Chat messages & context	Local only	Displaying conversation history in the panel	Stored locally in `chrome.storage.local` on your device only; never sent to our servers
Page content / DOM / errors	Sent to AI only	Providing AI debugging context when you explicitly attach it	Sent directly to Google Gemini API when you attach context; not stored on our servers
Credit balance & plan	Yes	Tracking usage limits for paid plans	Cloudflare D1 database (our servers)
Device identifier	Yes	Enforcing per-device limits for subscription plans	Cloudflare D1 database (our servers); also stored locally
Payment information	Never	—	Payments are processed entirely by Stripe. We never see or store card details.
Browsing history	Never	—	Not collected

2. How We Use Your Data

Account management — Your email is used to create and authenticate your account, and to deliver activation codes after purchase.
Feature access — Your plan and credit balance determine which features you can use. We update this data when you make a purchase or use a credit.
Device enforcement — A pseudonymous device ID prevents a single licence from being used on more devices than your plan allows.
AI requests — Chat messages and any context you explicitly attach (DOM elements, errors, page content) are forwarded to the Google Gemini API to generate responses. This data is not stored on our servers.
Transactional email — We use Resend (resend.com) to deliver activation-code emails. Only your email address is shared with Resend for this purpose.

3. Data Storage & Retention

Local storage — Chat history, extension settings, and authentication tokens are stored in chrome.storage.local on your device. You can delete this data at any time by removing the extension or clearing its storage in Chrome Settings.
Server-side storage — Account data (email, plan, credits, device ID) is stored in a Cloudflare D1 database hosted in the European Union / United States. This data is retained for as long as your account is active. You may request deletion at any time by contacting us.
Backups — Cloudflare may keep automated backups for up to 30 days.

4. Data Sharing & Third Parties

We do not sell your personal data. We share data only as described below:

Google Gemini API — Chat messages and attached context are sent to Google's Gemini AI when you use the chat feature. See Google's Privacy Policy.
Stripe — Payment processing. Stripe receives your payment details directly; we receive only a customer ID and subscription status. See Stripe's Privacy Policy.
Resend — Transactional email delivery (activation codes). Only your email address is shared. See Resend's Privacy Policy.
Cloudflare — Our API and database run on Cloudflare Workers and D1. Cloudflare may process request metadata (IP addresses, timestamps) as part of infrastructure operation. See Cloudflare's Privacy Policy.
Law enforcement — We may disclose data if required by law or to protect the safety of users.

5. Permissions Justification

The Extension requests only the minimum permissions necessary:

activeTab — To read the current page's DOM, console errors and network requests when you explicitly request AI analysis or attach context.
storage — To save your settings, activation code and chat history locally in your browser.
tabs / windows — To identify the inspected tab and pass messages between the DevTools panel and the inspected page.
host_permissions (<all_urls>) — Required to inject a lightweight content script that captures console errors and DOM context on any page you choose to debug. No data is collected passively; data is only read when you interact with the Extension.

6. Your Rights & Choices

Access — You may request a copy of the personal data we hold about you.
Deletion — You may request deletion of your account and all associated server-side data at any time.
Correction — You may ask us to correct inaccurate data.
Portability — You may request an export of your data in a machine-readable format.
Opt-out — You can stop all data processing by uninstalling the Extension and contacting us to delete your account.

To exercise any of these rights, contact us at vladimirsebian1@gmail.com.

7. Security

We use industry-standard security measures including HTTPS/TLS encryption in transit, server-side validation of all requests, and rate limiting to protect against abuse. Authentication tokens are stored locally and never logged on our servers.

8. Children's Privacy

Lumen is a developer tool intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date above. Continued use of the Extension after changes constitutes acceptance of the updated policy.

10. Contact

For privacy questions, data requests or complaints, contact:

Vladimir Sebian
Email: vladimirsebian1@gmail.com
Website: lumen-ai.online