Privacy, in plain words.
Updated October 4, 2026 · Lume Blocker 1.4.2
Support website and contact form
You can use this website without an account. We do not add advertising, analytics trackers, or tracking cookies. Your theme choice may be saved in your browser. Form drafts are kept only in the open page.
When you send a request, we receive the topic, message, and any email address or version information you choose to provide. These are stored privately in a separate Cloudflare D1 inbox, accessible to the Lume Blocker support operator through their Cloudflare account. They are used to handle your request. Providing an email is optional; without it we cannot reply.
When email notifications are enabled, the request and optional contact details are also sent through FormSubmit to the support operator’s private email inbox. FormSubmit retains submissions for 30 days under its privacy policy. Email copies remain in the support mailbox until deleted; the website’s automatic deletion does not remove those copies. We do not send advertising or add you to mailing lists.
Requests are scheduled for deletion after 90 days, with daily cleanup. A temporary daily hash of your IP address helps limit abuse and is cleared within 48 hours. The application does not store your raw IP address or write request bodies to logs. Cloudflare D1 recovery backups can retain deleted records for up to seven days.
Cloudflare hosts this website and processes network and security information. The form loads Cloudflare Turnstile when you start using it to prevent spam; Turnstile processes technical browser and connection information. See Cloudflare’s privacy policy and Turnstile’s privacy policy.
For access or deletion requests, select Privacy or data request in the contact form. Include your request reference and an email so we can verify and respond. Do not send backups, browsing history, PINs, authentication tokens, or pairing codes.
Lume Blocker extension
Lume Blocker stores rules, preferences, focus sessions, and browsing time by domain locally in Firefox. Local history retention defaults to 90 days and can be changed in Settings. The extension uses the active tab, audio activity, window focus, and inactivity to measure time. Private browsing pages are excluded from tracking.
Keyword blocking examines page text locally, excluding input fields and editable areas. That text is not sent to the sync service. Lume includes no advertising, marketing trackers, or product analytics uploads.
Optional synchronization
Sync is off by default. No requests to the sync service occur before you grant the relevant Firefox data permissions. Refusing or revoking permission stops requests while preserving local data and pairing. Tracking and blocking remain available without sync.
When enabled, sync sends rules, quotas, schedules, limits, keywords, social controls, preferences, and up to 365 days of history per device to the configured server. Rule deletion records are also synchronized so an older device does not restore deleted items.
Code pairing encrypts this content on your device with AES-256-GCM, using a key derived from the pairing code with PBKDF2. The code is kept locally and is not sent to the server. Anyone with the code can join the group and decrypt its content. Protect the code; the server cannot recover the encryption key.
Encryption does not cover the group identifier hash, device IDs and names, platform, authentication tokens, or activity/update timestamps. The Cloudflare D1 database stores the encrypted content and these metadata, including authentication tokens. Legacy account connections do not use this end-to-end encryption; the interface identifies that condition. Code-paired groups never upload plaintext when the key is missing or decryption fails.
The default service is https://lume-sync.lume-blocker.workers.dev. Network infrastructure receives your IP address and technical connection information. Worker application logs, traces, logpush, and tail consumers are disabled on this service. Cloudflare may process infrastructure and security information under its own privacy policy. If you configure another server, its operator receives the same types of sync data.
Retention and deletion
Server data remains until you delete the sync group; there is no automatic group expiration. The 365-day history limit does not expire an inactive group's stored payload. Use Settings → Cloud Sync → Delete Cloud Data to remove the group's payload, devices, and tokens from the active database. Deleted data may remain in Cloudflare D1 recovery backups for up to seven days.
You can disable sync or revoke devices. Disabling sync or revoking Firefox permission does not automatically delete data already uploaded. Cloud deletion preserves data on your device. Settings also lets you clear history or reset local data.
Backups are local files you choose to export. They exclude the PIN secret and sync token/pairing code. Rules, preferences, and history are stored in readable, unencrypted form, so protect backup files when sharing or storing them.
Support
Contact us through Lume Blocker Support. Messages sent through the support form are private. Do not post backups, browsing history, authentication tokens, or pairing codes.