Cookie Policy
Effective Date: March 18, 2026 · Last Updated: July 27, 2026
This Cookie Policy explains how Lumitone, a Deruvish Labs LLC service (lumitone.io) uses cookies. In short: Lumitone sets none of its own. Two third parties do set cookies on their own domains, and the one that matters is described below, because it happens without you clicking anything.
1. What We Use
The Service has no user accounts and no sign-in, so there is no session or login cookie to set. Lumitone sets no cookies of its own. Everything in the list below belongs to a third party on its own domain:
- Stripe, only if you start a checkout, and only on Stripe's own pages. These are strictly necessary for payment security and fraud prevention.
- Spotify, on any results page that shows track previews. We want to be exact here, because the earlier version of this policy said these cookies appear “when you interact with” the player, and that was not correct. The embedded player is an iframe from
open.spotify.com, and it loads as the page renders. We measured a results page with no clicking, hovering or scrolling at all: it contacted Spotify and Spotify set two cookies on its own domain (sp_landingandsp_t) before any interaction.sp_tis a Spotify identifier, not something we can see or read. Embeds load lazily, so how many players contact Spotify depends on how far down the list you scroll.
We are telling you this plainly rather than describing our site as cookie-free, because that description would not survive a look at the network tab. If you would rather not have this happen, blocking third-party cookies stops it and the rest of the page keeps working; you can also read the track names and open them on Spotify yourself using the links we provide.
| Source | Purpose | Lifetime |
|---|---|---|
| Lumitone (lumitone.io) | None, we set no cookies | n/a |
| Stripe (during checkout) | Payment security and fraud prevention on Stripe's own pages | Per Stripe's cookie policy |
| Spotify embeds (results pages) | Set by the embedded player as it loads, before any interaction. sp_landing, sp_t | Per Spotify's cookie policy |
A few things are kept in your browser's sessionStorage (not a cookie), only for the duration of the tab: your song/artist picks, so the results page can read them; the free result computed from a Letterboxd export you upload, so cancelling a payment or reloading does not lose it; and a small purchase-attempt record (an attempt counter and the id of a checkout you walked away from), so a retried payment reuses the same checkout instead of opening a second one. None of these are sent anywhere except with the requests you make, and all of them are destroyed when the tab closes.
2. What We Do NOT Use
- No tracking cookies. We do not track your behavior, on our site or across other websites.
- No advertising cookies, no ad networks, no marketing pixels. The only third parties that touch your browser are the two named in section 1, and neither is there to advertise to you.
- No analytics cookies. We do measure which steps of the site get used, but that measurement is first-party and cookie-free: it uses a random id held in sessionStorage that disappears when you close the tab. See section 2.4 of the Privacy Policy. We run no third-party analytics trackers of any kind.
- We do not use cookies to store your analysis data, your queries, or your browsing history. Recommendation activity is never written to a cookie. What we do and do not keep on the server is listed row by row in section 6 of the Privacy Policy.
3. Cookie Lifetimes
Lumitone itself sets no cookies, so there is nothing of ours to expire. Everything we keep in your browser (sessionStorage: picks, an uploaded export's free result, the purchase-attempt record) is cleared automatically when you close the tab. Third-party cookies set by Stripe or embedded players follow those providers' own lifetimes and policies.
4. Managing Cookies
You can delete or block cookies at any time through your browser settings. Blocking third-party cookies stops the Spotify cookies described in section 1 from being set. It will also break Stripe checkout and the inline previews. Everything else on the site, including the recommendations themselves and the links out to Spotify and Letterboxd, keeps working.
5. Changes to This Policy
We may update this Cookie Policy from time to time. Material changes are indicated by the "Last Updated" date above.
6. Contact
Questions about this policy: hello@lumitone.io