Privacy
Analytics that never stores a full IP
Verification needs the IP; your records don’t. Lume truncates every client IP to a network prefix before anything is persisted. Minimal by design, US-hosted.
How truncation works
The full IP is used at ingest to verify an agent and classify the network, then immediately truncated (IPv4 to a /24, IPv6 to a /48) before storage. The precise address is never written down.
What Lume stores
Truncated IP prefix IPv4 to a /24, IPv6 to a /48, enough to identify a network, never a person.
Country & ASN Derived at ingest for geo and datacenter classification.
Request metadata Method, host, path, user-agent, response code, and utm_source (never the full query string).
What Lume never stores
Full client IP Truncated to a network prefix before anything is persisted. The full IP never reaches storage.
Full query strings Only utm_source is captured, never tokens, emails, or session IDs in the URL.
Plaintext tokens Ingest and API tokens are stored hashed only.
Where it runs
Lume is hosted in a single US region (GCP us-east4). Minimal data, one region, hashed tokens: analytics you can defend.
Analytics you don’t have to apologize for.
Free plan, no full IPs, ever. Set up in minutes.
Start for free →