Privacy policy
Lunetta is self-hosted software. Your footage, thumbnails, and event data never leave your own server. We don't have access to any of it.
License verification
When you verify a license key, during installation or from the Settings page, Lunetta sends a request to lunetta.io/api/verify containing:
-
Your license key
-
An anonymous installation UUID (generated locally, never tied to a person)
-
Your installation domain (used to lock the license to one domain)
-
The Lunetta version number
This data is stored in a Cloudflare D1 database to verify that your license is valid and active. Verification repeats once every 24 hours automatically. We don't sell or share this data.
Lunetta Ping
Lunetta Ping is an optional feature that lets lunetta.io trigger a scan on your installation every minute, replacing the need for a server cron job. It is off by default and requires explicit opt-in.
When enabled, your domain is stored in a Cloudflare D1 database and your installation receives an HTTP request every minute from lunetta.io. Disabling it removes your domain from the ping list.
Contact form
The support form at /support sends your name, email address, and message to us via Brevo (a transactional email service). We use this information only to respond to your request. We do not add you to any mailing list.
The contact form is protected by Cloudflare Turnstile, an invisible CAPTCHA service. Turnstile processes a browser signal to distinguish humans from bots. No personal data is stored by Turnstile. For details, see the Cloudflare Turnstile Privacy Addendum.
Hosting infrastructure
The lunetta.io website and API are hosted on Cloudflare Pages and Cloudflare Workers. Cloudflare may log standard HTTP request metadata (IP address, user agent, timestamp) as part of its infrastructure. See Cloudflare's privacy policy for details.
Analytics
We use Umami, a self-hosted, privacy-focused analytics tool, to see which pages are visited and which links are clicked. Umami doesn't use cookies and doesn't track you individually across websites. Links in our update emails include a campaign tag (UTM parameter) so we can see whether an email led to a click — this only tells us that an email recipient clicked, not which one. We do not use tracking pixels in emails to detect whether they were opened.
Product update emails
When you buy Lunetta, we receive your email address from Polar (our payment processor) and store it to occasionally notify you about significant new versions — not for every release, and never for marketing unrelated to Lunetta. Every update email includes an unsubscribe link. If you unsubscribe, or if you delete your customer account with Polar, your email address is removed from our database.
Your footage
Lunetta is self-hosted. Your camera footage, thumbnails, labels, and event history are stored exclusively on your own server. We have no access to any of this data, cannot retrieve it, and are not responsible for its security or backup.
Contact
Questions about this privacy policy?
Get in touch