8luma

Privacy Policy

Last updated: February 21, 2026

Overview

8luma is a Chrome extension that lets you exchange sticky notes with friends on any web page. This policy describes what data we collect, how we use it, and the choices you have. We collect only the minimum data necessary to provide the service.

Data We Collect

  • Account data: When you sign up with email and password, we store your email address and a securely hashed password. When you sign in with Google, we receive your email and profile name from Google. We never store your Google password.
  • Profile data: Your chosen display name and sticker color preference.
  • Sticker content: Text and position of stickers you create, stored so they can be delivered to room members in real time.
  • Room membership: Which rooms you have created or joined, so we can deliver stickers to the correct participants.
  • Page URLs: When you create a site-specific sticker, the URL pattern of the target page is stored so the sticker is displayed only on matching pages. We do not collect browsing history or URLs of pages you visit without creating a sticker.
  • Local storage: Authentication tokens, cached sticker data, and UI preferences are stored locally in chrome.storage.local on your device. This data never leaves your browser unless described above.

How We Use Your Data

Your data is used exclusively to provide and improve the 8luma service:

  • Authenticate you and maintain your session
  • Create, deliver, and display stickers in real time
  • Manage room membership and access control
  • Show your display name and color to other room members
  • Display site-specific stickers on the correct pages

We do not use your data for advertising, profiling, analytics, or any purpose unrelated to the core functionality described above.

Third-Party Services

8luma relies on the following third-party services to operate:

  • Supabase (hosted on AWS) — authentication, database storage, and row-level security.
  • PartyKit — real-time WebSocket server for live sticker delivery between room members.
  • Google OAuth (optional) — used only if you choose to sign in with Google, via the standard chrome.identity API.
  • jsDelivr CDN — serves sticker pack images. No user data is sent to this service.

We do not sell, rent, or share your personal data with any other third parties.

Data Transmission & Security

  • All data is transmitted over encrypted connections (HTTPS and WSS).
  • Authentication tokens are sent in WebSocket message bodies, not in URL parameters, to prevent leakage in server logs.
  • Database access is protected by Supabase Row Level Security policies — users can only access their own data and rooms they belong to.
  • The extension’s Content Security Policy restricts connections to only the required service endpoints.

Analytics & Tracking

8luma does not use any analytics services, tracking pixels, crash reporting tools, or third-party advertising. We do not collect telemetry or monitor user behavior.

Data Retention

Your data is retained for as long as your account exists. Stickers you delete are removed from our database immediately. When you sign out, all locally cached data is cleared from your browser. If you request full account deletion, all associated data is permanently removed within 30 days.

Your Rights & Data Deletion

  • Delete individual stickers at any time from within the extension.
  • Leave or delete rooms you have created.
  • Sign out to clear all local data from your browser.
  • Request full account and data deletion by contacting us at the email below.

Children’s Privacy

8luma is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of 8luma after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy or your data, contact us at contact@8luma.com.