Privacy policy
Last updated 17 October 2026. This policy explains what Lumen Weather (lumenweather.com, “we”) collects, why, and the choices you have.
What we collect
- Account details. If you create an account we store your email address and your password as a salted, one-way hash. We never store your password itself.
- Sign-in sessions. When you sign in we create a random session token. It is kept in your browser’s local storage and on our servers, and expires after 30 days or when you sign out.
- Subscription status. If you subscribe to Lumen Plus we store whether your subscription is active and the customer and subscription IDs Stripe gives us.
- Approximate location. Our hosting provider tells us the approximate city of your internet connection so we can show local weather. We use it for that page and do not store it.
- Places you look up. Searches and forecast requests are sent from our servers to Open-Meteo to get weather data. They are not linked to your account and we do not keep a history of them.
Payments
Subscriptions are processed by Stripe. Card details go directly to Stripe; we never see or store them.
Password safety check
When you create an account we check your new password against known data breaches using the Pwned Passwords service. Only the first five characters of a one-way hash of the password are sent, so the service never learns your password.
Advertising and cookies
Free pages show ads from Google AdSense. Lumen Plus subscribers do not see ads.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
- You can opt out of personalised advertising by visiting Google Ads Settings, and opt out of some third-party vendors’ cookies at aboutads.info.
- Learn more in How Google uses information from sites that use its services.
We do not set our own tracking or analytics cookies.
Services your browser connects to
Pages load content directly from these providers, which receive your IP address as part of the request: Google Fonts and Google AdSense, OpenFreeMap (map tiles), RainViewer (rain radar, Plus only) and Stripe (checkout). Our site is hosted by Cloudflare, which processes all requests and stores account data, possibly outside Australia.
How long we keep data
Account details are kept until you ask us to delete your account. Sessions expire after 30 days. Stripe keeps payment records as required by law.
Your choices
You can ask us to access, correct or delete your account details by emailing support@engsitetools.com. We handle personal information in line with the Australian Privacy Principles. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.
Changes
If this policy changes we will update this page and the date above.