Data Protection Protocol

Privacy Policy

Version 2.4 • Effective March 2026

01. Information We Collect

Lume Cinema operates on a "Minimum Viable Data" principle. We only store information required to maintain your personalized media dashboard:

  • Account Security: We store your username and a cryptographically hashed version of your password. We never see your raw password.
  • Integration Tokens: Your Real-Debrid API keys are stored in our database to facilitate unrestrict services.
  • Library & History: We record TMDB IDs and media types for items added to "My List" or your watch history to sync progress.
  • Local Sessions: Temporary cookies are used to keep you authenticated during your session.

02. Third-Party Data Flow

Lume Cinema acts as a bridge between multiple services. When you browse, your browser makes requests to The Movie Database (TMDB) for posters and metadata. When you stream, your browser communicates directly with Torrentio and Real-Debrid. Lume does not sit in the middle of your streaming traffic, and your IP address is never logged during media playback.

03. Your Right to Erasure

You maintain absolute sovereignty over your data. At any time, you may navigate to the Settings panel to trigger a "Hard Wipe" of specific data points: