Lumina privacy policy

Lumina is self-hosted. Your photographs and the data derived from them stay on infrastructure controlled by the person who runs this instance. They are never sent to us, because there is no “us” to send them to.

Last updated 14 September 2026. This policy covers the application named Lumina at https://luminagallery.in, operated by the individual reachable at csa_rv@outlook.com.

What Lumina stores

Photographs you choose to import, and thumbnails generated from them.
Information read from those photographs: date taken, camera, location if the file carries one, and text detected inside the image.
Face groupings used to organise pictures by person, and any names you assign.
The configuration of the sources you connect.

All of it is held in this instance's own database and object storage.

Google user data

This section describes, specifically, every way Lumina interacts with data obtained through Google APIs.

Scopes requested, and why

https://www.googleapis.com/auth/drive.readonly — read-only. Used to list the contents of the Google Drive folder you explicitly point Lumina at, and to download the image files inside it so they can be imported into your library. Lumina requests read-only access because importing is all it does; no narrower Drive scope allows a folder to be browsed and its files read.
https://www.googleapis.com/auth/photospicker.mediaitems.readonly — read-only. Used to download only those photographs you personally select in Google's own Photos Picker. Lumina cannot see, list or search your Google Photos library; it receives exactly the items the picker hands back, and nothing else. This is the narrowest available Google Photos scope.
openid, email, profile — used only to identify which Google account a connection belongs to, so the Sources page can show it and so the right token is refreshed. No profile information is used for anything else.

What Google data Lumina accesses, and how it is used

File and album metadata (names, identifiers, sizes, timestamps, MIME types) — used to display a folder or picker selection for you to choose from, and to avoid importing the same file twice.
Image file contents — downloaded and written into this instance's own storage as your library copy, then analysed on this server to extract the date, camera, location, any text in the frame, and face groupings that make the picture findable.
Your Google account email address — shown on the Sources page so you know which account is connected.
OAuth access and refresh tokens — held only so an import you started can continue and so you do not have to re-authorise on every visit.

Google data is used for one purpose: to provide the import and search features you asked for, to you, in your own library. It is not used for any other purpose.

How Google data is stored and protected

Imported images and their derived data live in this instance's private database and object storage, which are not publicly reachable. OAuth tokens are stored server-side, never exposed to the browser, and never written into logs. The whole application is served over HTTPS only, and every page except this one, the homepage and the terms sits behind sign-in restricted to a single authorised owner.

What Lumina never does with Google data

Never writes to, modifies or deletes anything in your Google account. All access is read-only.
Never transfers Google user data to any third party, and never sells or rents it.
Never uses it for advertising, ad targeting, profiling or credit assessment.
Never uses it to train, retrain or improve any machine-learning model, whether ours or anyone else's. All image analysis uses fixed, pre-existing models running locally on this server; no image or derived data leaves it.
Never allows humans other than you to read it, except where you have given explicit consent, where it is necessary for security purposes, or where required by law.

Lumina's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retaining and deleting Google data

Tokens are kept only while a source is connected. Disconnecting a Google source on the Sources page deletes its stored access and refresh tokens immediately; Lumina can then read nothing further from that account. Imported photographs are yours and are kept until you delete them, at which point the image, its thumbnails and everything derived from it are removed from the library. Nothing is retained in a separate archive, and there is no backup held by any third party.

You may revoke Lumina's access at any time, independently of this application, at Google account permissions. To have any remaining data removed, write to csa_rv@outlook.com.

What Lumina does not do

No advertising, and no profiling for advertising.
No selling or sharing of personal data with third parties.
No analytics or tracking of any kind.
No use of your photographs to train machine-learning models.
All image analysis — faces, text, places — runs locally on this server.

Who can see your library

This instance is restricted to a single signed-in owner. Photographs are served only to that authenticated session. If the owner chooses to publish a folder, that folder — and only that folder — becomes reachable at a link protected by a PIN they set; nothing else in the library is exposed by doing so.

Children

Lumina is not directed at children and is not offered to anyone under 13.

Changes to this policy

If this policy changes, the date at the top of this page changes with it, and the revised policy is published here.

Contact

Questions about this policy, or requests concerning your data: csa_rv@outlook.com.