Demo SandboxYou are viewing the evaluation demo deployment of Lumist Studio. All 15 utilities are unlocked in local sandbox mode.Go to Production →
100% Local-First Architecture

Privacy Policy

Document Version 2.0 • Last Architectural Audit: October 2026

1. The Local-First Architecture

Lumist Studio operates with an absolute commitment to data privacy. We do not collect, transmit, store, monetize, or inspect your personal information. Our static edge infrastructure is engineered so that we cannot access your records even if requested.

2. Client Data Sandboxing

All data entered into Lumist—including task titles, client billables, timesheet logs, color swatches, typography scales, regular expressions, and swipe-file snippets—remains stored exclusively on your device inside your browser's sandboxed IndexedDB storage engine.

Zero client payloads are transmitted to cloud databases or remote telemetry endpoints. Your workspace data remains entirely on your machine.

3. Zero Tracking & Telemetry

Lumist Studio deploys zero tracking cookies, advertising beacons, session recording scripts, or third-party telemetry analytics. We fully support hardened browser configurations (such as LibreWolf, Mullvad Browser, Brave, and Tor). All interface preferences—including currency formats and manual timezone offsets—save locally to client storage.

4. Browser Extensions Addendum

This addendum governs our three native Manifest V3 companion extensions:

  • Lumist Hue Extractor: Scrapes active tab CSS color variables.
  • Lumist Type Extractor: Samples active tab typography ratios and font families.
  • Lumist Stash Clipper: Captures highlighted text snippets, DOM links, and image URLs.

On-Demand Execution: Extensions execute strictly when you explicitly click their toolbar icon. They run zero background listeners and monitor zero browsing history.

DOM-Only Sampling: Extensions inspect computed CSS styles or user-selected elements only. They cannot access form inputs, passwords, authentication cookies, or session tokens.

Local Hash Transmission: Captured assets serialize into Base64 URL hash fragments (#import=...) and transfer directly into your local browser sandbox. Data never routes through remote servers.

5. Extension Permissions Justification

Our companion extensions request minimal permissions strictly necessary for execution:

  • activeTab: Grants temporary read permission to sample styling on the single tab currently in focus.
  • scripting: Executes the local client-side CSS analyzer script on demand.

6. Data Sovereignty & Permanent Deletion

Lumist has no servers, so we cannot access, view, or delete your records for you. You maintain complete sovereignty over your data lifecycle. To erase your records, clear your browser's site data for lumist.app.

We recommend utilizing Lumist Safe to download periodic Master JSON backups or enable rolling 15-minute hard drive sync before clearing browser cache.

7. Policy Revisions

If Lumist Studio ever introduces optional cloud synchronization features, this policy will be revised and all cloud synchronization will remain strictly opt-in by default.