Privacy Policy
Your privacy matters to us. We believe in transparency and minimal data collection.
At a glance
Questions? privacy@lumiverde.music
Our Privacy Promise
We don't track, sell, or monetize your personal data. Lumiverde collects only the essential information needed to provide our music community platform. We work with trusted service providers (like Cloudflare for security and Mollie for payments) who are contractually prohibited from selling or misusing your data. We believe your privacy is a fundamental right, not a luxury.
What Data We Collect
Account Information
- •Email Address: Required for account creation, login, and password recovery
- •Display Name/Nickname: Auto-generated username for community interaction
- •Profile Information: Optional name, bio, and location you choose to share
- •Registration & Login IP Addresses: We record your IP address and browser type when you register and when you log in for security and fraud prevention purposes. This helps us detect and prevent unauthorized account access. Your IP is masked in our analytics (last octet zeroed) and is cleared when you delete your account.
Location Information
- •Country & City: When you set your location in your profile or when creating gig opportunities
- •Precise Coordinates (for organizers): If you operate a venue or organize events, we also store your geographic coordinates (latitude/longitude) to display your location accurately on our interactive map
How we use this: Location data is used solely to display gigs and events on our interactive map filtered by your country and city. This helps you discover music opportunities in your area. In the future, we may use aggregated location statistics to improve recommendations and tailor content by region.
What we DON'T do: We do not track your movements, sell location data to third parties, or use it for advertising purposes. Location data is never shared outside Lumiverde and is only used internally to improve your experience on our platform.
Newsletter Subscription
- •Email Address: Only if you voluntarily subscribe to our newsletter
- •Subscription Date: When you subscribed for managing your preferences
Newsletter subscription is completely optional and separate from your account.
Security & Fraud Prevention
- •Cloudflare Bot Protection: Our platform uses Cloudflare's edge-level Bot Protection to defend against automated attacks and malicious traffic. Cloudflare processes anonymized request metadata to identify bots before they reach our servers.
- •Honeypot Fields: Our registration form includes hidden fields (honeypot) designed to catch simple automated submissions. If filled, the registration is blocked.
Content You Create
- •Event/Marker Posts: Information about music events you share
- •Forum Posts: Your contributions to community discussions
- •Upload Requests: Music content you submit for community sharing
What We DON'T Collect
How We Use Your Data
Payment Processing & Financial Data
We do NOT store or process your payment information directly.
All payments are processed by Lumiverde (the legal entity operating Lumiverde) through Mollie B.V., a PCI DSS Level 1 certified payment service provider. Your credit card details, bank account information, and other financial data never touch our servers.
When you make a payment, you are redirected to Mollie's secure payment environment. We only receive confirmation of payment status (successful/failed) - never your actual payment details.
Payment Method Privacy Policies
Depending on your chosen payment method, additional privacy policies may apply:
- •Mollie (All payments): Mollie Privacy Policy
- •Klarna: Klarna Privacy Policy
- •Apple Pay: Apple Privacy Policy
- •Credit/Debit Cards, Swish, Klarna, Apple Pay: Processed securely through Mollie (see Mollie privacy policy above)
What Payment Data We Store
For subscription management and one-time purchases (e.g., private gig postings, Instagram feature requests), we store only:
See our Refund Policy for detailed refund terms, EU withdrawal rights, and how to request a refund.
- •Payment status (successful/failed/pending)
- •Payment method type (e.g., "creditcard", "swish", "klarna")
- •Payment type (recurring subscription or one-time purchase)
- •Payment amount and currency
- •Transaction date and subscription period (where applicable)
- •Mollie payment reference ID (for support purposes only)
- •Whether you've used the new-member free trial (so it can't be claimed twice on the same account)
We NEVER store: Credit card numbers, CVV codes, bank account details, or any sensitive financial information.
Free trial refunds: if you sign up during a free-trial promotion, your first payment (used to set up billing with Mollie) is automatically refunded. This refund is processed the same way as any other Mollie transaction and is reflected in your payment history.
Data Sharing & Security
We NEVER sell, rent, or share your personal data with third parties for marketing purposes.
Your data is stored securely and only accessed by authorized personnel for platform maintenance and support.
Payment processing data is shared only with Mollie (our payment processor) as necessary to complete transactions. Mollie is PCI DSS Level 1 certified and GDPR compliant.
We may only disclose information if required by law or to protect our users and platform from abuse.
Cloudflare - Content Delivery & Security
We use Cloudflare as our content delivery network (CDN) and security provider. When you visit Lumiverde, your requests are routed through Cloudflare's infrastructure to:
- Protect against DDoS attacks and malicious traffic
- Improve website performance and loading speeds
- Cache static content for faster delivery worldwide
- Ensure platform reliability and uptime
What Cloudflare Processes: As our security and performance provider, Cloudflare processes your IP address, HTTP request data (URLs, headers, request metadata), and technical information about your connection. Cloudflare terminates TLS connections for your traffic, allowing it to inspect and filter malicious requests.
Data Protection: Cloudflare acts as our data processor under GDPR and is contractually prohibited from selling, renting, or leveraging your data for advertising or marketing purposes. Cloudflare uses the data you transmit only to provide its security and performance services, improve its network, and prevent abuse.
For more information about Cloudflare's privacy practices, see their Privacy Policy.
Other Service Providers
hostup.se — Image Storage
We use hostup.se, a Swedish S3-compatible object storage provider, to store user-uploaded images (event photos, profile images, gallery images). Your image data is stored within the EU on hostup.se servers. hostup.se acts as our data processor under GDPR and is contractually prohibited from using your data for any purpose other than providing storage services.
Mapbox — Geocoding & Maps
We use Mapbox as our primary geocoding and map-display provider — turning a location you type (e.g. an event or venue address) into map coordinates, and rendering interactive maps. Some map interactions call Mapbox directly from your browser, which means your IP address and the location text you enter reach Mapbox for that request. Mapbox is contractually bound by its own data processing terms and does not receive your email, account information, or other Lumiverde account data.
Nominatim (OpenStreetMap) — Geocoding
We use Nominatim, OpenStreetMap's community-run geocoding service, as a fallback to resolve location text into geographic coordinates. Nominatim receives only the location string you provide (e.g., "Stockholm, Sweden"). We never send your email, account information, or other personal data. This service is used only to improve location accuracy when the primary geocoding provider does not return a good match.
Sentry (Error Monitoring)
We use Sentry to automatically capture JavaScript and server errors so we can fix bugs faster. When an error occurs, Sentry records the stack trace, browser type, page URL, and error message.
Sentry does not receive: your email address, password, payment details, or any content you create on the platform. send_default_pii is disabled.
Sentry is operated by Functional Software, Inc. and is GDPR compliant. See their Privacy Policy.
Cookies We Use
We use a small, fixed set of cookies — no advertising or cross-site tracking cookies. Here's every cookie we set:
| Cookie | Purpose | Duration | Essential? |
|---|---|---|---|
| session | Keeps you logged in | 2 hours (renews while active) | Yes |
| csrf_token | Protects your account from cross-site request forgery | Until browser closes | Yes |
| consent | Remembers you've dismissed the cookie notice | 1 year | Yes |
That's the complete list — we don't set analytics, advertising, or third-party tracking cookies.
Your Rights & Control
Access & Download
Request a copy of all data we have about you
Correction
Update or correct your personal information anytime
Deletion
Delete your account; personal data is anonymized. Payment records retained for legal compliance, forum/messages preserved without identifying info.
Newsletter Control
Subscribe or unsubscribe from newsletters anytime
Contact & Updates
For any privacy-related questions, data requests, or concerns, contact us at:
Last Updated: July 23, 2026
We will notify users of any significant changes to this privacy policy.
Terms of Service
Our Terms of Service now live on their own page — covering platform purpose, prohibited content, content moderation, liability, and governing law.
Read the full Terms of Service →