Privacy policy

The short version

This website runs one tracking script: the Meta Pixel, which tells Meta (the company behind Facebook and Instagram) which pages you visit here so we can measure and target our ads on those platforms. If your browser sends a Global Privacy Control signal, the pixel does not load at all. We run no analytics tool. Our own code sets exactly one cookie, and only if you use the assistant — the chat button in the corner — which needs to count how many questions you have asked. Beyond that, if you have not used the assistant, emailed us or booked a call, we do not hold anything about you beyond the ordinary server log entry your browser generates by requesting a page.

The rest of this page is the long version of that, written out properly so you can check it rather than take our word for it.

Who is responsible

LumiRank Studio ("LumiRank", "we") operates lumirank.ca from Toronto, ON, Canada. We are the party responsible for the personal information described here.

Questions, access requests and deletion requests all go to dmytro.hrysiuk@lumirank.ca, and are answered by a person rather than a queue.

What this website collects

Nothing, unless you use the assistant. There is no contact form, no newsletter signup and no account system. The only fields on lumirank.ca are the assistant's question box and the client feedback form, and the feedback form sends nothing to us itself: it opens an email in your own mail app (see "When you contact us").

What you type into the assistant is sent to Anthropic, which generates the answer, and is then discarded. We do not store your questions, we do not log them, and they are not attached to your identity anywhere. Do not type anything into it you would not put in a first email to a stranger — it is a sales assistant, not a confidential channel.

Our hosting provider records a standard server log for each request, as every web server does. That log contains your IP address, the page requested, the time of the request, and your browser's user-agent string. We use it to keep the site running and to investigate errors and abuse. We do not use it to build a profile of you, and we do not combine it with anything else.

Cookies and tracking

One cookie, set only once you use the assistant. It is called lr_chat, it is first-party and HttpOnly, it expires after 24 hours, and the only thing inside it is a signed count of how many questions you have asked — no identifier, nothing about you, nothing that follows you to another site. The assistant also writes one key to your browser's local storage, lumirank.chat.v1, holding the same count so the widget knows what to show you before the server answers. Clear your site data and both are gone. None of this is a setting you have to trust us on — open your browser's developer tools and check.

The assistant also limits free questions by IP address. We never store the address: it is combined with a secret and the current date and put through a one-way hash, which produces a key that cannot be turned back into your IP and stops matching once the date changes.

We use the Meta Pixel. On every page it loads a script from Meta, which sets Meta's own cookies (_fbp, and _fbc if you arrived from one of our ads) and sends Meta the page address, the time, your IP address and your browser details. If you are logged in to Facebook or Instagram in the same browser, Meta can connect that visit to your account. We use it to count visits from our ads, to build audiences of past visitors for our ads on Facebook and Instagram, and to see which ads lead to enquiries. We do not send Meta your name, email address or anything you type on this site. What Meta does with the data is covered by Meta's privacy policy, not this one.

To opt out: turn on Global Privacy Control in your browser (Firefox, Brave and DuckDuckGo support it, and so do many privacy extensions), and the pixel never loads. You can also block third-party cookies, use a content blocker, or change your ad settings in your Facebook or Instagram account under Accounts Centre → Ad preferences.

Apart from that, there is no Google Analytics, no Google Tag Manager, no LinkedIn insight tag, no heatmap or session-recording tool, and no A/B testing script. Our typefaces are downloaded when the site is built and served from our own servers, so loading a page here does not make a request to Google Fonts or any other font host.

Some pages show short videos from our Instagram account. Until you press play, each one is just an image served from our own site, and nothing is loaded from Instagram's player. When you press play, the video loads in Instagram's own player, which is run by Meta: your browser connects to Instagram, and Meta may set its own cookies and collect information under Meta's privacy policy, not this one. If you would rather not, use the link under each video to watch it on Instagram instead, or skip it.

There is no consent banner. The Meta Pixel loads without asking first; Global Privacy Control and the options above are how you switch it off.

When you contact us

If you email dmytro.hrysiuk@lumirank.ca, we hold that email: your address, your name if you give it, and whatever you chose to write. We use it to reply to you and to carry on the conversation. We do not add you to a mailing list, and we do not sell, rent or share it.

If you book a call, that booking is made through Calendly, a third-party scheduling service. The link on our site is an ordinary outbound link — Calendly runs no script on our pages — but once you follow it you are on their service, and what they collect is governed by their privacy policy rather than this one. We receive the booking details they pass on: your name, your email address and anything you write in the booking form.

The client feedback form at /feedback sends nothing to our servers. Pressing its button opens an email in your own mail app, addressed to us and pre-filled with what you typed, which you can edit or discard before sending. We only publish feedback if you ticked the publish box, and even then only after you have approved the exact wording in writing. We take a published quote down whenever you ask.

We keep correspondence for as long as it is useful to the working relationship or to answering a question you may come back with. Ask us to delete it and we will, and we will confirm when it is done.

Who else processes it

We keep this list short deliberately, and it is the complete list.

• Google Cloud Platform — hosting. The site runs on Cloud Run in Google's us-central1 region, which means requests to this website are served from, and logged in, the United States.
• Anthropic — generates the assistant's answers, and only if you use it. Your question is sent to their API to be answered; under our commercial terms it is not used to train their models.
• Meta Platforms — advertising measurement and audiences, through the Meta Pixel described under "Cookies and tracking". Meta processes that data in the United States and elsewhere.
• Calendly — call scheduling, only if you book a call.
• Our email provider — receiving and storing the messages you send us.

Where your information goes

Because the site is hosted in the United States, the server-log data described above is processed there, and any email you send us may be processed outside Canada depending on where our provider stores it. Information held in another country is subject to the laws of that country, including lawful access requests by its authorities.

We say this plainly rather than burying it, because it is the single most consequential fact in this policy for anyone in Canada or the EU deciding whether to contact us.

Your rights

Wherever you are, you can ask us what we hold about you, ask us to correct it, ask us to delete it, and ask us to stop using it. We will not charge you for asking and we will not ask you to justify the request.

If you are in Canada, those rights sit under PIPEDA and, in Quebec, under Law 25. If you are in the EU or the UK, they sit under the GDPR, and our lawful basis for holding correspondence is legitimate interest in replying to you. If you are in California, they sit under the CCPA. We do not sell personal information. The Meta Pixel does count as "sharing" for cross-context behavioural advertising as that law defines it, and you can opt out of that sharing by sending a Global Privacy Control signal, which we honour automatically, or by writing to us.

Write to dmytro.hrysiuk@lumirank.ca and we will act on it. If you are unhappy with how we handled a request, you are entitled to complain to your privacy regulator — the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or your national data protection authority.

Children

This is a business-to-business marketing site. It is not directed at children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

If we add anything to this site that collects information — an analytics tool, a form, an embedded scheduler — this page changes before that ships, not after. The effective date at the top tells you when it last did.