Who is responsible
LuckyLummi.com is operated as the Lucky Lummi art project. For privacy questions, requests, or complaints, contact privacy@luckylummi.com. The operator of LuckyLummi.com is the controller of personal data described in this policy.
Information we process
- Basic technical data, such as IP address, browser type, device information, requested URL, timestamps, and server or security logs.
- Website usage information collected through Google Analytics, including pages visited, approximate location, device information, and interaction data.
- Donation information needed to start and confirm a Stripe checkout. Lucky Lummi does not receive or store full payment-card details.
- Information provided when you contact us, including your email address, message, and any information you choose to include.
- When social publishing tools are used, account identifiers, authorization tokens, granted permissions, content and metadata selected for publication, and technical results returned by the relevant platform.
Why we use information
We process information to deliver and secure the website, understand aggregate site usage, answer messages, process donations, comply with legal obligations, and publish content to a connected social account only when its owner has authorized that action.
Depending on the activity, the legal basis is performance of a requested service or contract, consent, compliance with law, or our legitimate interests in operating and protecting the site. Where consent is required, it can be withdrawn at any time without affecting earlier lawful processing.
Social platform APIs
Lucky Lummi may use APIs supplied by YouTube, TikTok, Instagram/Meta, Bluesky, and SoundCloud to publish or manage content. We request only permissions needed for implemented features. We do not ask for or store social-platform passwords, sell API data, use it for advertising, or publish content without an explicit authorized action.
Use of YouTube API Services is subject to the YouTube Terms of Service. Google describes its own processing in the Google Privacy Policy. Google access can be reviewed or revoked in Google Security Settings.
Sharing and service providers
Information is shared only as needed with infrastructure and service providers, including AWS for hosting and server functions, Google for analytics and YouTube integrations, Stripe for donations, and the social platform selected for a publishing action. These providers process information under their own terms and privacy notices. Information may also be disclosed when required by law or necessary to protect rights, safety, and service integrity.
Cookies and similar technology
The site may use essential storage required for operation and Google Analytics technology to understand visits and performance. Browser settings can restrict cookies. Where applicable law requires consent for non-essential analytics, those technologies should be used only after that consent is obtained.
Retention and deletion
We keep personal data only as long as needed for the purposes above, legal obligations, dispute handling, and security. Authorization tokens are retained only while the connected integration remains active. When access is revoked, related authorized API data is deleted or anonymized as soon as reasonably possible and within any shorter period required by the platform. YouTube authorized data is deleted within seven calendar days of revocation unless retention is legally required.
International transfers
Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, standard contractual clauses, or another lawful safeguard.
Your choices and rights
Depending on the law that applies, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent and lodge a complaint with your local supervisory authority. See the GDPR Information page for request details.
Children
Lucky Lummi is not directed to children under 16 and does not knowingly collect their personal data. Please contact us if you believe a child has provided personal data.
Changes
This policy may change as the site or its integrations develop. Material changes will be posted here with a revised update date.