Legal

Cookies Policy

Lumafly uses only what is strictly necessary to keep the Service running. No advertising cookies, no tracking pixels, no analytics platforms — just a single session cookie and a bit of browser local storage to remember your preferences.

Effective date: May 1, 2026 · Last updated: May 1, 2026

This Cookies Policy explains how The NG8 Group LLC ("we," "us," "our"), operating Lumafly at lumafly.ai, uses cookies and similar technologies when you use our Service.

We have designed Lumafly with a minimal footprint: we use only what is strictly necessary to keep the Service functioning. We do not use advertising cookies, tracking pixels, analytics platforms, or behavioral profiling tools.

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function or work more efficiently, and to provide information to website operators.

Browser local storage is a related technology that allows websites to store data directly in your browser without setting cookies. Unlike cookies, local storage data is not automatically sent to the server with each request.

We use a single category of cookie: Strictly Necessary.

3.1 Session cookie (strictly necessary)

AttributeValue
NameSession cookie (set by our authentication system)
ProviderLumafly (first-party)
PurposeAuthenticates your identity and keeps you logged in to your account
TypeHTTP-only, Secure, SameSite session cookie
DurationExpires when your session ends or your login expires
TrackingNone — this cookie does not track behavior, interests, or browsing activity

This cookie is essential for the Service to function. Without it, you cannot log in or use any features of Lumafly.

HTTP-only means the cookie cannot be accessed by JavaScript running in your browser, protecting it from cross-site scripting attacks. Secure means it is only transmitted over encrypted HTTPS connections.

In addition to the session cookie, we use your browser's local storage to store certain preference and onboarding data on your device. Local storage is not a cookie — it is not sent to our servers with each request — but it serves a similar functional purpose.

We store the following items in local storage:

KeyPurpose
Onboarding completion statusRemembers whether you have completed the onboarding flow
Business name and typePre-fills your business profile during setup
Selected social media platformsRemembers your preferred platforms (Instagram, TikTok, Facebook)
Business profile dataCaches your profile locally for faster access
Imported menu itemsStores imported product/menu data during setup
POS connection detailsCaches your Point-of-Sale connection status
Profile setup methodRecords how you set up your profile
Social media experience levelStores your self-reported experience level

This data:

  • Is stored only on your device
  • Is not used to track your behavior across websites
  • Is not shared with third parties for advertising or analytics
  • Exists solely to provide a smoother in-app experience

You can clear local storage at any time using your browser's developer tools or privacy settings (see Section 6).

To be explicit, we do not use:

  • Analytics cookies (e.g., Google Analytics, Mixpanel, Amplitude)
  • Advertising or targeting cookies (e.g., Meta Pixel, Google Ads, LinkedIn Insight Tag)
  • Behavioral tracking or fingerprinting
  • Third-party tracking scripts or pixels
  • A/B testing platforms
  • Session recording tools (e.g., Hotjar, FullStory)
  • Retargeting or remarketing cookies

6.1 Browser settings

You can control and delete cookies through your browser settings. Most browsers allow you to:

  • View what cookies are set
  • Block cookies from specific websites
  • Block all third-party cookies
  • Delete all cookies when you close the browser

For instructions specific to your browser:

  • Chrome: chrome://settings/cookies
  • Safari: Preferences > Privacy
  • Firefox: Preferences > Privacy & Security
  • Edge: Settings > Cookies and site permissions

Please note: Blocking or deleting the session cookie will log you out of the Service and prevent you from logging back in until a new session is established.

6.2 Local storage

To clear local storage, you can use your browser's developer tools (typically accessed via F12) and navigate to Application > Local Storage > lumafly.ai, then delete the relevant keys. Alternatively, clearing your browser's site data will remove all stored data for lumafly.ai.

Clearing local storage will reset your onboarding preferences and cached profile data within the browser. Your account data stored on our servers (your business profile, posts, etc.) will not be affected.

6.3 Consent

Because we use only strictly necessary cookies required to operate the Service, we do not present a cookie consent banner for our session cookie under most frameworks (including GDPR, where strictly necessary cookies are exempt from consent requirements). However, you remain free to disable cookies in your browser at any time.

[BEFORE LAUNCH ALERT] If you add any analytics, advertising, or non-essential cookies in the future, you will need to implement a cookie consent management platform (CMP) to comply with GDPR, ePrivacy Directive, and similar laws for EEA/UK users. Do not add any non-essential cookies without updating this policy and adding a consent mechanism.

When you connect Social Platform accounts (Instagram, TikTok, Facebook), you will interact with those platforms' OAuth flows in pop-up windows or redirects. Those platforms may set their own cookies according to their own cookie policies, which we do not control. We encourage you to review:

  • Meta (Instagram/Facebook): facebook.com/privacy/policies/cookies
  • TikTok: tiktok.com/legal/cookie-policy

These third-party cookies are not set on lumafly.ai itself and are outside our control.

We may update this Cookies Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page. Continued use of the Service after any changes indicates your acknowledgment of the updated policy.

For questions about our use of cookies or this policy:

The NG8 Group LLC (Lumafly)
Attn: Privacy
2108 N ST, STE N
Sacramento, CA 95816
Email: legal@lumafly.ai
Website: lumafly.ai

Questions?

Drop us a line at hello@lumafly.com and a real human will get back to you.