Cookie & Analytics Disclosure

This disclosure explains how CardLuma.com uses cookies, pixels, tags, analytics tools, advertising technologies, and similar technologies.

1. What Are Cookies?

Cookies are small text files stored on your device that help websites function, improve performance, and understand usage patterns.

Pixels, tags, and similar technologies are small pieces of code that may allow us or our service providers to recognize when a browser or device interacts with our Website.

2. How We Use Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes:

a. Essential & Security Cookies

Maintain session integrity
Prevent fraud and abuse
Protect the Website from malicious activity, including through providers such as Cloudflare

b. Analytics and Performance Technologies

Understand how users interact with the Website
Measure feature usage and performance
Improve usability and reliability
Understand referral sources, traffic patterns, and Website performance

c. Advertising and Measurement Technologies

Measure the effectiveness of advertising campaigns
Understand how visitors interact with our Website after viewing or clicking an ad
Support ad attribution, audience creation, remarketing, targeted advertising, and advertising for CardLuma
Provide advertising, analytics, and measurement services through providers such as Meta/Facebook, TikTok, Google, and similar providers
Advertising cookie providers currently in use on this Website: Meta (Facebook) Pixel and TikTok Pixel. Whether they send events depends on your region and your choices, as described in Section 3
Analytics provider currently in use on this Website: Google Analytics. Whether it uses cookies depends on your region and your choices, as described in Section 3; when it may not use cookies, it receives only cookieless signals under Google Consent Mode

Advertising, analytics, and measurement technologies may allow us and our advertising, analytics, and measurement providers to collect or receive information from our Website and use that information to provide measurement services, analytics, ad attribution, audience creation, remarketing, targeted advertising, and related services.

The information collected may include IP address, browser and device information, pages viewed, referral information, timestamps, Website interactions, online identifiers, and conversion events.

We may use technologies from providers such as Meta/Facebook, TikTok, Google Analytics, Google Ads, and similar providers to understand Website activity, measure advertising effectiveness, attribute conversions, create audiences, and advertise CardLuma to people who may be interested in the Services.

We do not intentionally share uploaded images, user-submitted listing content, marketplace authentication tokens, full payment card details, or sensitive Service data with advertising providers.

When you arrive on our Website from a link that carries campaign tags (the utm_source, utm_medium, utm_campaign, utm_content, utm_term, and utm_id parameters, or the fbclid and ttclid click identifiers from Meta and TikTok), and our optional analytics and advertising technologies are on for you under Section 3, we save those tags, the Website page you landed on, and the time in a first-party cookie named "cardluma_ft" for up to 90 days. Only your first tagged visit is saved; later visits do not replace it.

When you follow a link from our Website to the CardLuma app (my.cardluma.net), we add the saved campaign tags to that link so the app can record which campaign brought you to CardLuma if you sign up. The cookie does not contain your name, email address, or other contact details. If you decline, we delete it and stop adding the tags.

3. Your Choices: Consent, Opt-Out, and Global Privacy Control

How our optional analytics and advertising cookies, pixels, and tags behave depends on where you are:

European Union, European Economic Area, United Kingdom, and Switzerland: they are off until you choose Allow in the cookie banner. If you choose Decline, or make no choice, they stay off.
Everywhere else, including the United States: they are on unless you decline. The cookie banner tells you this when you first visit and gives you a Decline button.

We estimate your region from your browser's time zone setting, not from your IP address or precise location. If your browser reports a European time zone, a UTC time zone, or no time zone, we treat you as being in the European group above.

Global Privacy Control. We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a request to opt out, and our optional analytics and advertising cookies, pixels, and tags stay off unless you choose Allow.

How to opt out. Choose Decline in the cookie banner. To change an earlier choice, use the "Your Privacy Choices" link in the footer of our pages, or the "Cookie Policy" tab at the bottom of the page, to reopen the banner, then choose Decline. When you decline, the Meta Pixel and TikTok Pixel stop sending events from this Website and Google Analytics stops using cookies.

Your choice is saved in a cookie named "cookieconsent_status" in that browser for up to one year. If you clear your cookies, or use a different browser or device, you will need to choose again.

Other Ways to Manage Cookies and Advertising

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality.

Depending on your state of residence, you may have the right to opt out of targeted advertising, cross-context behavioral advertising, or sharing of personal information for advertising purposes. To submit an opt-out request, choose Decline in the cookie banner as described above, or contact us at support@cardluma.com with the subject line "Privacy Opt-Out."

You may also manage advertising preferences through the settings offered by advertising platforms and through browser or device-level privacy controls.

For Google services, you can learn more about how Google uses information from sites or apps that use its services and manage certain Google advertising preferences through Google's available controls. Google states that websites using Google services may share information such as the page URL and IP address, and that Google may use cookies or read existing cookies for purposes including advertising measurement, fraud protection, service improvement, and ad personalization depending on user settings.

4. Updates

We may update this disclosure to reflect changes in technology, our use of cookies or similar technologies, or legal requirements.

5. Contact

Questions regarding cookies, analytics, or advertising technologies may be sent to: support@cardluma.com

Previous Versions

Earlier versions of this disclosure are preserved for reference: