Privacy
What Lumet keeps, and what it does not
You can scan without an account. This page is what a scan, a share link, a login, or a contact message leaves behind.
Last updated September 1, 2026.
What we keep
A scan needs a URL and the HTML we fetched. An account needs an email. You can use Lumet without one.
We keep
The URL you paste
The HTML snapshot from that fetch
The report: HTTP status, robots, metadata, headings, JSON-LD types, a JS-less word count, and a verdict
A shareable /scan/… id
Optional account email and a hashed password
Contact email and message, used to reply
Theme, home lamp, sign-in, and email-hint cookies
The address you connect from, briefly, for rate limits
We skip
A name
JavaScript on the page you scan
Logging in to that page
Advertising cookies
Contact messages in the app database
Selling this information
A scan
You paste a URL. Lumet fetches that page without JavaScript, stores the snapshot and the report, and gives you a page you can open later.
01
URL
The address you paste. Lumet does not log in to that page.
02
Fetch
HTML only. No JavaScript. No extra pages.
03
Parse
Status, robots, metadata, headings, JSON-LD, word count, verdict.
04
Store
Snapshot and report JSON on the servers that run this site.
05
Report
A page you can reopen. The /scan/… link is enough to open it.
A report link is public
Anyone with the /scan/… link can open the report. That is the share model, not a private inbox.
example.com
snapshot
Words in first HTML
48
Open. The link is enough. No login required to read it.
Delete. Signed-in scans can be removed from your list. That drops the file and the link.
Anonymous. We do not expire those links on a timer.
Accounts and contact
Neither needs a name. Close an account from the email it uses.
Accounts
Optional. Email and a hashed password. We do not collect a name. To close an account, use the contact page from that email.
Contact
The form sends us your email and message. We use that to reply. It is not kept in the app database.
How long it stays
Functional cookies only. No advertising cookies. A full bar means it lasts until you delete it or close the account.
| Data | Held | Until |
|---|---|---|
| Snapshot + report | Until you delete it | |
| /scan/… link | No timer. Until the scan is deleted | |
| Account | Until you close it via contact | |
| lumet-theme | About a year | |
| lumet-hero-lamp | About a year | |
| better-auth.session_token | Until you log out or the session ends | |
| lumet-email | Email hint for the header, while signed in | |
| Contact message | Not kept in the app database |
Where a request goes
A CDN sits in front of the site. Reports and accounts live on the servers that run this site. We do not sell this information.
01
You
Browser, theme, and session. The URL you paste.
02
CDN
Sees the address you connect from. We use that address briefly to rate-limit scans and contact messages. Sessions may store an address and browser name.
03
Lumet
Snapshot, report, and optional account. Not directed at children under 13. Material changes update the date above.
Questions: use the contact form. That is the address this page talks about.