This policy describes MakeMyLure and the LureLab software studio at https://makemylure.com. Privacy enquiries: dp0304@gmail.com.
1. Account, design and connection information
Registration stores your email address, a salted password hash, account preferences and security/session records. We do not store your plaintext password. Editing and simulation run on your device. Cloud save uploads your design document and related images or assets to your account; unsaved local files remain on your device. We also record print-export usage, operation references and a file digest to enforce the allowance and recognise retries.
Our hosting infrastructure receives connection information such as IP address, request path, browser information and errors when serving pages. It is used to deliver and secure the website. If you contact us, we use the information you provide to answer and resolve your enquiry. Do not send card details or other sensitive information by email.
2. Hosting and providers
The service runs on Alibaba Cloud in Singapore. Account, design and subscription records are stored in MySQL; uploaded files are stored on the application server's local disk. Resend receives the address and message content needed to deliver verification, password-reset and service emails. Waffo Pancake processes subscription checkout and maintains its payment records; we receive subscription/payment references, status, amounts, currency, tax and refund information, rather than full card numbers. Google Fonts receives normal browser/network request information when delivering fonts. Providers may process information outside your country under their own privacy terms.
3. Optional Google Analytics
Google Analytics loads only after your separate, explicit consent. We send fixed public-page and studio-action categories, not account identifiers, order numbers, design contents, form input, full URLs, query strings or referrer addresses. Google also processes pseudonymous browser/session identifiers and network information under its privacy policy. Advertising personalization, Google Signals, user-provided data collection and enhanced measurement are disabled for this property.
The consent choice is stored in your browser. Analytics uses session cookies prefixed lurelab_ga4. You can withdraw consent in Analytics choices; this stops new collection and removes these cookies. Google event and user data retention is configured for two months without an activity reset. Aggregated reports may remain longer. Global Privacy Control disables optional analytics. First-party server usage analytics is disabled.
4. Use, sharing and retention
We use information to run and secure accounts, save designs, enforce export allowances, fulfil subscriptions, answer requests and meet legal obligations. We do not sell personal information or share it for targeted advertising. Information is shared with the providers described above or when legally required. Deleted designs are scheduled for cleanup after 30 days; account deletion removes cloud designs, anonymises the profile and revokes sessions. Billing, security and audit records, export ledgers and a non-readable email-derived trial identifier may be retained for accounting, disputes or preventing repeat trials. Provider records and backups follow their applicable retention processes; deletion does not promise immediate removal of every retained record.
5. Your choices
Account settings let you update your profile, export account/design data and request account deletion after subscriptions have ended and outstanding checkouts are resolved. You can clear local browser data and decline or withdraw analytics consent. Where laws such as the GDPR apply, you may have rights of access, correction, erasure, portability, restriction and objection, and the right to complain to a supervisory authority. Contact dp0304@gmail.com for requests not handled in account settings; we may need to verify your identity. We do not intentionally collect personal information from children under 13.
6. Security and updates
We use HTTPS, salted scrypt password hashes and access controls. No system is perfectly secure; keep your login details and exported files safe. This policy is updated when the service or its data processing changes. The publication date below identifies this version.