Privacy Policy

1. What we do not collect

We want to be precise about this, because most privacy policies are vague where it matters. On this Site there is:

• no account, login or profile;
• no analytics, no tracking pixel, no advertising network, no session recording;
• no cookie set by us;
• no payment processing — we never see a card number, because pledging happens on Kickstarter.

The single exception is the launch waitlist described in section 4: if you type a mobile number or an email address into the popup, we store it. That is the only personal information this Site asks for, and it is optional. We do not sell or share personal information, and we never have.

Local storage

The waitlist popup writes one value in your browser's local storage (lumenears.waitlist) to remember that you have already joined or closed it, so it does not reappear on every visit. It is not a cookie, it is never sent to us or to anyone else, and clearing your browser data removes it.

2. What happens automatically when you visit

Server logs

Like any website, this Site is served by a hosting provider that may keep standard access logs, typically the requesting IP address, the time of the request, the page or file requested, the referring page and the browser's user-agent string. These logs exist to serve the pages, to keep the service secure and to diagnose faults. Our hosting provider is [HOSTING PROVIDER] and its retention period is [RETENTION PERIOD].

Web fonts

The Site loads its typeface from Google Fonts. This means your browser makes a request to Google's servers (fonts.googleapis.com and fonts.gstatic.com) when the page loads, and Google receives your IP address and user-agent as part of that request. We do not control what Google does with it; Google's privacy policy applies. No cookie is set by the font request itself.

If you would rather this did not happen at all, the font can be self-hosted, which removes the third-party request entirely.

The hero video

The looping video on the home page is served from this Site's own server. Playing it sends nothing to any third party.

3. The campaign video, if you press play

Where a campaign video is embedded from YouTube or Vimeo, it is click-to-load: the page shows a still image, and nothing is requested from YouTube or Vimeo until you press play. That means no third-party script and no third-party cookie reaches you unless you choose to watch.

If you do press play, the player loads from youtube-nocookie.com or player.vimeo.com and that provider then receives your IP address and may set cookies or similar identifiers under its own privacy policy. Not pressing play avoids this completely.

4. The launch waitlist

A popup on the home page offers to tell you when the Kickstarter campaign goes live. It asks for a mobile number, and a link in the popup switches it to an email address instead; you give one or the other, never both. It is entirely optional — closing it costs you nothing, and the rest of the Site works the same either way.

If you do submit it, this is exactly what happens:

• What we store: the mobile number or email address you typed, your first name if you chose to give one, the date and time, the browser's user-agent string, which channel you chose, and — for a number — the exact consent wording shown to you at the time. The name field is optional and the form works without it; we use it only to address the emails we send you. We do not store your IP address. Numbers are stored in international format, so (949) 555-0134 is saved as +19495550134.
• Where it is stored: a PostgreSQL database hosted by Render, our hosting provider, in the United States.
• What we send: two messages, whichever channel you chose. If you gave an email address: a confirmation straight away, and one email when the campaign launches. If you gave a mobile number: a confirmation text straight away, and one text when the campaign launches. Nothing else, on either channel. We do not run a newsletter and we do not pass the list to anyone. Standard message and data rates may apply to texts; replying STOP ends them immediately.
• Who else sees it: emails are delivered by Resend and text messages by SignalWire, both acting on our instructions and processing your address or number only in order to send those two messages.
• How long we keep it: until the campaign ends and the launch email has gone out, or until you ask us to remove it — whichever comes first. After that the list is deleted.

To be taken off the list at any point, reply STOP to a text, reply to either email, or write to eesha@rclick.com and we will delete the entry. Where the GDPR applies, our lawful basis is your consent, which you may withdraw at any time.

5. If you email us

If you write to eesha@rclick.com we receive your email address, your name if you give it and whatever you put in the message. We use it only to answer you, we keep it no longer than we need it for that purpose, and we do not add you to any mailing list.

6. When you leave for Kickstarter or social media

The buttons on this Site take you to Kickstarter, and the footer links to Instagram and TikTok. Those are separate services with their own privacy policies and their own tracking. Anything you do there — including backing the project, which involves giving Kickstarter your name, address and payment details — is between you and them. We only receive what Kickstarter chooses to share with a project creator, which for reward fulfilment normally includes the backer's name, email address and shipping address.

7. Children

LumenEars is a product that appeals to children, but this Site is aimed at the adults who back campaigns, and it is not directed at children under 13. We do not knowingly collect personal information from children, and the waitlist is meant for the adult who would back the campaign. If you believe a child has joined the waitlist or sent us personal information by email, write to us and we will delete it.

8. Your rights

Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected or deleted, to object to or restrict its processing, to receive a copy of it, and not to be discriminated against for exercising those rights. This includes rights under the California Consumer Privacy Act as amended (CCPA/CPRA) and, for visitors in the European Economic Area and the United Kingdom, the GDPR.

In practice, the only personal information we are likely to hold is a waitlist entry — a number or an address — or an email exchange you started. To exercise any of these rights, write to eesha@rclick.com and we will respond within the period the applicable law allows.

Where the GDPR applies, our lawful basis for keeping server logs and for replying to your email is our legitimate interest in operating a secure website and in answering the people who contact us; for the waitlist it is your consent.

9. Security and international transfers

The Site is served over HTTPS, and waitlist signups are submitted over HTTPS to a database that is not reachable from the public internet. No system is perfectly secure, but since the Site holds no accounts and no payment details, the most sensitive thing it stores is a phone number or an email address. Our hosting provider, our email provider and the font and video services named above may process data on servers in the United States and elsewhere, so using the Site may involve an international transfer of the data described in sections 2 and 4.

10. Changes to this policy

If the Site changes — for example if analytics is ever added, or if we start using the waitlist for anything beyond the two emails described above — this policy will be updated before that change goes live, and the date at the top of this page will tell you when it last changed.

11. Contact

Questions, requests or complaints about privacy go to eesha@rclick.com.