This disclosure explains how CardLuma.com uses cookies, pixels, tags, analytics tools, advertising technologies, and similar technologies.
1. What Are Cookies?
Cookies are small text files stored on your device that help websites function, improve performance, and understand usage patterns.
Pixels, tags, and similar technologies are small pieces of code that may allow us or our service providers to recognize when a browser or device interacts with our Website.
2. How We Use Cookies and Similar Technologies
We use cookies and similar technologies for the following purposes:
a. Essential & Security Cookies
- Maintain session integrity
- Prevent fraud and abuse
- Protect the Website from malicious activity, including through providers such as Cloudflare
b. Analytics and Performance Technologies
- Understand how users interact with the Website
- Measure feature usage and performance
- Improve usability and reliability
- Understand referral sources, traffic patterns, and Website performance
c. Advertising and Measurement Technologies
- Measure the effectiveness of advertising campaigns
- Understand how visitors interact with our Website after viewing or clicking an ad
- Support ad attribution, audience creation, remarketing, targeted advertising, and advertising for CardLuma
- Provide advertising, analytics, and measurement services through providers such as Meta/Facebook, Google, and similar providers
- Advertising cookie provider currently in use on this Website: Meta (Facebook) Pixel. Whether it sends events depends on your region and your choices, as described in Section 3
- Analytics provider currently in use on this Website: Google Analytics. Whether it uses cookies depends on your region and your choices, as described in Section 3; when it may not use cookies, it receives only cookieless signals under Google Consent Mode
Advertising, analytics, and measurement technologies may allow us and our advertising, analytics, and measurement providers to collect or receive information from our Website and use that information to provide measurement services, analytics, ad attribution, audience creation, remarketing, targeted advertising, and related services.
The information collected may include IP address, browser and device information, pages viewed, referral information, timestamps, Website interactions, online identifiers, and conversion events.
We may use technologies from providers such as Meta/Facebook, Google Analytics, Google Ads, and similar providers to understand Website activity, measure advertising effectiveness, attribute conversions, create audiences, and advertise CardLuma to people who may be interested in the Services.
We do not intentionally share uploaded images, user-submitted listing content, marketplace authentication tokens, full payment card details, or sensitive Service data with advertising providers.
d. Campaign Attribution Cookie
When you arrive on our Website from a link that carries campaign tags (the utm_source, utm_medium, utm_campaign, utm_content, utm_term, and utm_id parameters, or Meta’s fbclid click identifier), and our optional analytics and advertising technologies are on for you under Section 3, we save those tags, the Website page you landed on, and the time in a first-party cookie named "cardluma_ft" for up to 90 days. Only your first tagged visit is saved; later visits do not replace it.
When you follow a link from our Website to the CardLuma app (my.cardluma.net), we add the saved campaign tags to that link so the app can record which campaign brought you to CardLuma if you sign up. The cookie does not contain your name, email address, or other contact details. If you decline, we delete it and stop adding the tags.
3. Your Choices: Consent, Opt-Out, and Global Privacy Control
How our optional analytics and advertising cookies, pixels, and tags behave depends on where you are:
- European Union, European Economic Area, United Kingdom, and Switzerland: they are off until you choose Allow in the cookie banner. If you choose Decline, or make no choice, they stay off.
- Everywhere else, including the United States: they are on unless you decline. The cookie banner tells you this when you first visit and gives you a Decline button.
We estimate your region from your browser's time zone setting, not from your IP address or precise location. If your browser reports a European time zone, a UTC time zone, or no time zone, we treat you as being in the European group above.
Global Privacy Control. We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a request to opt out, and our optional analytics and advertising cookies, pixels, and tags stay off unless you choose Allow.
How to opt out. Choose Decline in the cookie banner. To change an earlier choice, use the "Your Privacy Choices" link in the footer of our pages, or the "Cookie Policy" tab at the bottom of the page, to reopen the banner, then choose Decline. When you decline, the Meta Pixel stops sending events from this Website and Google Analytics stops using cookies.
Your choice is saved in a cookie named "cookieconsent_status" in that browser for up to one year. If you clear your cookies, or use a different browser or device, you will need to choose again.
Other Ways to Manage Cookies and Advertising
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality.
Depending on your state of residence, you may have the right to opt out of targeted advertising, cross-context behavioral advertising, or sharing of personal information for advertising purposes. To submit an opt-out request, choose Decline in the cookie banner as described above, or contact us at support@cardluma.com with the subject line "Privacy Opt-Out."
You may also manage advertising preferences through the settings offered by advertising platforms and through browser or device-level privacy controls.
For Google services, you can learn more about how Google uses information from sites or apps that use its services and manage certain Google advertising preferences through Google's available controls. Google states that websites using Google services may share information such as the page URL and IP address, and that Google may use cookies or read existing cookies for purposes including advertising measurement, fraud protection, service improvement, and ad personalization depending on user settings.
4. Updates
We may update this disclosure to reflect changes in technology, our use of cookies or similar technologies, or legal requirements.
5. Contact
Questions regarding cookies, analytics, or advertising technologies may be sent to: support@cardluma.com
Previous Versions
Earlier versions of this disclosure are preserved for reference:
- Cookie & Analytics Disclosure effective Sep 27, 2026 – Oct 2, 2026
- Cookie & Analytics Disclosure effective Sep 27, 2026 – Sep 27, 2026
- Cookie & Analytics Disclosure effective Sep 26, 2026 – Sep 27, 2026
- Cookie & Analytics Disclosure effective Apr 25, 2026 – Sep 26, 2026
- Cookie & Analytics Disclosure effective Apr 19, 2026 – Apr 25, 2026
- Cookie & Analytics Disclosure effective Feb 01, 2026 – Apr 19, 2026