Luseri

Luseri / Legal

Privacy policy

This page explains what data Luseri keeps, what it is for, how long it stays and how to have it erased. Luseri sells no data and shows no ads.

Updated

Who is responsible

The controller of your data is the publisher of Luseri, Arthur Renard (contact details in the legal notice). For any question: contact@luseri.com.

On public pages

The home page and the guides set no cookie and load no analytics tool and no script from another site. Your light or dark theme choice stays in your browser and is sent nowhere.

If you open the demo, an insight_demo cookie remembers it until you close your browser. As for any website, the host logs the IP address and the requested page on each visit, to run the service and protect it from abuse.

When you create an account

DataWhat it is forHow long
Your email addressSigning in, confirming your address, sending the weekly report and alertsAs long as your account exists
Your passwordSigning in. It is never stored as such: only a fingerprint that cannot be reversed is keptAs long as your account exists
Session cookie insight_sessionKeeping you signed in30 days, or until you sign out
IP address and email entered, on each sign-in attemptBlocking someone trying to guess a password24 hours
Links sent by emailConfirming your address or changing your password3 days for confirmation, 1 hour for the password

When you connect your app

  • Your Shopify Partner token, encrypted. Luseri only uses it to read: it changes nothing on Shopify.
  • What Shopify returns about your app: installs, uninstalls and payments, with the name and web address of each store involved, and the message a merchant leaves when uninstalling.
  • Your App Store listing, reviews and rank, which are public.
  • If you connect Google Analytics: visit numbers for your App Store listing (number of visits, sites they come from), read with read-only access.
  • If you add tracking to your app: the merchant actions your server sends. They are erased after 400 days.

Everything else is kept while the app is connected. When you remove an app, its data goes with it; when you delete your account, everything is erased at once. Database backups expire on their own within 7 days.

Data about the stores using your app concerns you first: Luseri processes it on your behalf, only to show you your numbers. Under the European data protection regulation (GDPR), you are the controller and Luseri is your processor. Luseri uses it for nothing else and shows it to no other account.

Emails

Luseri writes to you about your account (address confirmation, forgotten password) and, as long as you keep them on, sends a weekly report and alerts. You turn them off in one click with the link at the bottom of each, or in your account settings.

Companies that help run the service

CompanyRoleWhere the data is
Vercel Inc. (United States)Hosts the site and runs the serversFrankfurt (Germany) for the servers
Neon Inc. (United States)DatabaseFrankfurt (Germany)
Resend (United States)Sending emailsIreland
Anthropic PBC (United States)Translating messages left by merchantsUnited States
Google (Ireland)Reading your Google Analytics numbers, only if you connect itEuropean Union and United States
ImprovMX Inc. (United States)Forwarding emails sent to contact@luseri.comUnited States

These companies use the data only to provide this service. Anthropic does not use it to train its models. When data leaves the European Union, the transfer relies on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework.

Security

All exchanges with the site are encrypted. Passwords are only kept as fingerprints and Shopify tokens are encrypted. After several failed attempts, sign-in is blocked for fifteen minutes.

Your rights

You can ask to see your data, correct it, receive it in a file or have it erased, and object to a use. Changing your email address and deleting your account are done directly in the settings. For the rest, write to contact@luseri.com: you get an answer within a month.

If the answer does not satisfy you, you can complain to the CNIL, the French data protection authority, at cnil.fr, or to the authority of your own country.

Changes

If this page changes on an important point, you are told by email before the change applies.

The dashboard is in French. This English version is a translation for convenience: if it differs from the French version, the French version applies.