Lume Blocker privacy policy

Version 1.4.2 — October 4, 2026.

Lume Blocker stores rules, preferences, focus sessions, and browsing time by domain locally in Firefox. Local history retention defaults to 90 days and can be changed in Settings. The extension uses the active tab, audio activity, window focus, and inactivity to measure time. Private browsing pages are excluded from tracking.

Keyword blocking examines page text locally, excluding input fields and editable areas. That text is not sent to the sync service. Lume includes no advertising, marketing trackers, or product analytics uploads.

Optional synchronization

Sync is off by default. No requests to the sync service occur before you grant the relevant Firefox data permissions. Refusing or revoking permission stops requests while preserving local data and pairing. Tracking and blocking remain available without sync.

When enabled, sync sends rules, quotas, schedules, limits, keywords, social controls, preferences, and up to 365 days of history per device to the configured server. Rule deletion records are also synchronized so an older device does not restore deleted items.

Code pairing encrypts this content on your device with AES-256-GCM, using a key derived from the pairing code with PBKDF2. The code is kept locally and is not sent to the server. Anyone with the code can join the group and decrypt its content. Protect the code; the server cannot recover the encryption key.

Encryption does not cover the group identifier hash, device IDs and names, platform, authentication tokens, or activity/update timestamps. The Cloudflare D1 database stores the encrypted content and these metadata, including authentication tokens. Legacy account connections do not use this end-to-end encryption; the interface identifies that condition. Code-paired groups never upload plaintext when the key is missing or decryption fails.

The default service is https://lume-sync.lume-blocker.workers.dev. Network infrastructure receives your IP address and technical connection information. Worker application logs, traces, logpush, and tail consumers are disabled on this service. Cloudflare may process infrastructure and security information under its own privacy policy (https://www.cloudflare.com/privacypolicy/). If you configure another server, its operator receives the same types of sync data.

Retention and deletion

Server data remains until you delete the sync group; there is no automatic group expiration. The 365-day history limit does not expire an inactive group's stored payload. Use Settings → Cloud Sync → Delete Cloud Data to remove the group's payload, devices, and tokens from the active database. Deleted data may remain in Cloudflare D1 recovery backups for up to seven days.

You can disable sync or revoke devices. Disabling sync or revoking Firefox permission does not automatically delete data already uploaded. Cloud deletion preserves data on your device. Settings also lets you clear history or reset local data.

Backups are local files you choose to export. They exclude the PIN secret and sync token/pairing code. Rules, preferences, and history are stored in readable, unencrypted form, so protect backup files when sharing or storing them.

Support

Contact us through Lume Blocker Support (https://lume-support.lume-blocker.workers.dev/#contact). Support form messages are private. Do not post backups, browsing history, authentication tokens, or pairing codes.

The support website is hosted separately on Cloudflare. Its contact form stores the message and any email or version information you provide in a private inbox, with scheduled deletion after 90 days. Email is optional.

When email notifications are enabled, requests and optional contact details are also forwarded through FormSubmit to the support operator’s private email inbox. FormSubmit retains submissions for 30 days (https://formsubmit.co/privacy.pdf). Email copies remain in the support mailbox until deleted; website deletion does not remove those copies. These messages are used only to handle support requests, with no advertising or mailing lists. Website privacy details: https://lume-support.lume-blocker.workers.dev/privacy.html