Policies
Cookie Notice
Strictly necessary cookies, your own preferences, and Lusso's own analytics only with your consent. No advertising cookies or third-party trackers.
Version 2026-11-09 Last updated
Draft pending legal review. This document is a working template that has not yet been approved by counsel. It describes how Lusso is built to work and may change before launch; material changes will be announced in advance.On this page
Lusso sets cookies that are strictly necessary to provide the service you ask for (one of them remembers your cookie choice) and cookies that remember settings you chose yourself. Under the EU ePrivacy rules and the UK PECR these do not need consent. Lusso also measures its marketplace with its own first-party analytics, which keeps random ids in your browser's local storage: in the EU, the UK and every other place where the law requires it, it runs only after you allow it in the banner; where the law lets it run until you say no (for example the USA), you can turn it off at any time. It never runs when your browser sends Global Privacy Control or Do Not Track. We do not use advertising, retargeting or cross-site tracking cookies, and no third-party tracker or pixel runs on Lusso. The only measurement by another company is page views and page performance measured for us by our host Vercel and our error-monitoring service Sentry, and it runs only after you have allowed analytics yourself (never on notice alone or by pressing OK on the notice, never with Global Privacy Control or Do Not Track). Change your choices.
Section 01
1. Cookies we set
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| __Secure-authjs.session-token | Keeps you signed in (encrypted, HttpOnly). Over plain HTTP in development it is called authjs.session-token. | Up to 7 days of inactivity (12 hours for administrators) | Strictly necessary |
| __Host-authjs.csrf-token | Protects sign-in and sign-out against cross-site request forgery | Browser session | Strictly necessary |
| __Secure-authjs.callback-url | Remembers which page to return to after signing in | Browser session | Strictly necessary |
| __Secure-authjs.state, __Secure-authjs.pkce.code_verifier, __Secure-authjs.nonce | Secure the round-trip when you sign in with Google or GitHub | 15 minutes | Strictly necessary (only if you use Google or GitHub sign-in) |
| lusso_known_login | Security: recognises a browser that has signed in to your account before, so that someone guessing passwords for your account elsewhere cannot lock you out of it (HttpOnly, sent only to the sign-in endpoints, holds no identifier or password) | 90 days | Strictly necessary (after you sign in with a password) |
| lusso_signed_out | Security: remembers that you signed out of a session in this browser, so a delayed response cannot sign you back in (HttpOnly, holds only a random session id) | 7 days | Strictly necessary (after you sign out) |
| lusso_rekey | Security: keeps you signed in on this device right after you change your password or security settings, while your other devices are signed out (HttpOnly) | 15 minutes | Strictly necessary (after a password or security change) |
| lusso_app_oauth | Carries the sign-in request of the Lusso desktop or mobile app through the browser and back to the app (HttpOnly, sent only to the app sign-in endpoints) | 10 minutes | Strictly necessary (only when you sign in to a Lusso app through your browser) |
| lusso_invite | Carries your personal waitlist invite from the invite link through sign-up (HttpOnly) | Up to 24 hours, or until the invite expires | Strictly necessary (only after you open an invite link) |
| lusso_consent | Remembers your cookie and analytics choices (whether Lusso's own analytics and marketing measurement may run) with a random id that links the record of your choices, so the banner does not ask again and your choice is respected. Holds no other identifier | 6 months | Strictly necessary (after you make a choice in the cookie banner or on Privacy choices) |
| lusso_sidebar_collapsed | Remembers whether you collapsed the side menu, so pages open at the width you chose. Holds only 1 or 0 | 1 year | Preference you set (only after you collapse or expand the side menu) |
| lusso_motion | Remembers your motion setting (Settings › Motion: reduced or full motion instead of your device's), so pages open with the motion you chose. Holds only reduced or full | 1 year | Preference you set (only after you choose Reduced or Full in Settings › Motion) |
| lusso_theme | Remembers your theme (Settings › Preferences or the display button: light or dark instead of your device's), so pages open in the theme you chose. Holds only light or dark | 1 year | Preference you set (only after you choose Light or Dark) |
| lusso_text | Remembers your text size (Settings › Preferences or the display button), so pages open at the size you chose. Holds only lg or xl | 1 year | Preference you set (only after you choose Large or Larger text) |
| lusso_founders | Security: keeps the Founders area of the admin open in this browser after a Lusso team member entered the founders code. Signed and HttpOnly, tied to their sign-in; holds no code | 12 hours | Strictly necessary (only for Lusso staff, after they enter the founders code) |
| lusso_admin_nav_groups | Remembers which sections of the admin menu a Lusso team member folded or opened. Holds only section names and 1 or 0 | 1 year | Preference you set (only for Lusso staff, after they fold or open an admin menu section) |
Cookies marked "only …" are set only in that situation; most visitors carry just the sign-in cookies. None of them is used for advertising, analytics or to follow you across other sites.
Large session cookies may be split into numbered parts (for example .0 and .1); they work the same way.
Section 02
2. Other storage in your browser
Some features keep a small value in your browser's local or session storage instead of a cookie. These values stay on your device: they are not sent to us with every request, and none of them is used for advertising or to follow you across sites. Session storage is deleted when you close the tab. The analytics ids are sent only to our own analytics endpoint, and only while analytics is allowed.
| Key | Purpose | Duration | Type |
|---|---|---|---|
| lusso:session-refresh | Security: the time this tab last refreshed your sign-in, so it is not refreshed twice at once | Until you close the tab (session storage) | Strictly necessary (while you are signed in) |
| lusso:sidebar-collapsed | Remembers whether you collapsed the side menu (the same choice as the menu cookie). Holds only 1 or 0 | Until you clear your browser data (local storage) | Preference you set (only after you collapse or expand the side menu) |
| lusso:compare | The products you added to the compare tray, so the tray survives a page reload | Until you remove them or clear your browser data (local storage) | Preference you set (only after you add a product to compare) |
| lusso.compare.fit | The Ask Lusso question you chose Compare these from, shown on the comparison as "Best fit for". Kept in this tab so your words never go into a link or the address bar, and ignored after an hour | Until you close the tab (session storage) | Preference you set (only after you choose Compare these in Ask Lusso) |
| lusso:recent-searches | Your last few searches, shown in the search palette. Kept only in this browser | Until you clear them or your browser data (local storage) | Preference you set (only after you search from the search palette) |
| lusso.ask.v1, lusso.ask.pending | Keeps your Ask-Lusso conversation in this tab while you browse, and the question you typed in the search box until the assistant opens | Until you close the tab (session storage) | Strictly necessary (only if you use the Ask-Lusso assistant) |
| lusso:creator-application | Remembers the status of your creator application in this tab, so the page does not ask the server again on every view | Until you close the tab (session storage) | Strictly necessary (only when you are signed in and look at becoming a creator) |
| lusso:launch-shared:<storefront id> | Remembers that you copied your storefront link from the launch checklist in Creator Studio, so the checklist can fold away. Holds only 1 | Until you clear your browser data (local storage) | Preference you set (only after you copy your storefront link from the launch checklist) |
| lusso:wizard-copilot | Remembers whether a creator left the Copilot panel open or closed in the listing editor | Until you clear your browser data (local storage) | Preference you set (only for creators, after they open or close the panel) |
| lusso.admin.categories.open | Remembers which category groups a Lusso team member folded or opened in the admin area | Until they clear their browser data (local storage) | Preference you set (only for Lusso staff) |
| lusso.hq.guide.<guide>.v1 | Remembers which steps of an HQ checklist a Lusso team member ticked in the admin area. Holds only step names, never sent to Lusso | Until they clear the ticks or their browser data (local storage) | Preference you set (only for Lusso staff, after they tick a step) |
| lusso:tm:vid, lusso:tm:sid | Lusso's own analytics (no third party): a random visitor id, renewed after 13 months at the latest, and a random visit id that ends after 30 minutes without activity, so page views, searches and steps can be counted once per visitor and visit. The visitor id also keeps a short one-way code of the account last signed in on this browser (not your account id), so a new visitor id starts when you sign out or someone else signs in. Not derived from your device; never written unless analytics is allowed, and deleted when you turn analytics off | Visitor id up to 13 months, visit id 30 minutes after your last activity (local storage) | Analytics, only with your consent (only after you allow analytics (or, where the law lets it run until you say no, until you turn it off); never with Global Privacy Control or Do Not Track on) |
| lusso:ev:<day>:<event>:<product>, lusso:si:<search>:<page>, lusso:viewed:<product> | Remembers which product pages, product views and search results this tab has already counted, so a reload is not counted twice in the view counts and trending lists. Holds only the marker 1, no identifier | Until you close the tab (session storage) | Statistics (no identifier) (when you view products or search results) |
Section 03
3. Third-party services
- Cloudflare Turnstile runs a privacy-preserving bot check on public forms. It processes browser and device signals during the check and does not set advertising cookies on our domain.
- Stripe Checkout runs on Stripe's own pages when you pay, and creators set up payouts and manage their plan on Stripe's own pages too. Stripe may set cookies there for fraud prevention under its own privacy policy.
- Sign in with Google, only if you choose it, takes you to Google's own sign-in page. Google may set cookies there under its own privacy policy.
- Sign in with GitHub, only if you choose it, takes you to GitHub's own sign-in page. GitHub may set cookies there under its own privacy policy.
- Vercel Web Analytics and Speed Insights measure page views and page speed for us, only after you have allowed analytics yourself in the banner or on Privacy choices. They never run before you choose, on notice alone (for example in the USA, where our own analytics may run until you say no and pressing OK on the notice keeps only our own analytics on), on admin pages, or when your browser sends Global Privacy Control or Do Not Track, and they stop as soon as you withdraw. They set no cookies, do not identify you across sites, and receive page addresses without their query strings. Their script is served from our own domain.
- Vercel Blob, the file storage of our host Vercel, serves product images, previews and profile pictures, and receives the files you upload (for example a product file or a message attachment) straight from your browser. Vercel therefore sees your IP address when your browser loads or uploads a file. It sets no cookies.
- Sentry, our error-monitoring service, receives a technical report when a page fails and, only after you have allowed analytics yourself (as for Vercel above), page-load timings for a sample of visits (the error or timing, the page address without its query string, and browser and device type; email addresses and tokens are removed). Reports normally go through our own domain, so Sentry does not see your IP address. If that route fails, your browser may send the report to Sentry directly, and then Sentry sees your IP address. When our security policy blocks something on a page, your browser reports that block to our own server, not to Sentry. We pass it on to Sentry with only the type of block, the rule involved and the page and resource addresses without their query strings, with sign-in, password-reset, verification and invite tokens removed. Sentry does not see your IP address or browser on these reports. Sentry sets no cookies and is not used for advertising or analytics.
- Fonts are self-hosted on our own domain. The only third-party script a page loads is the Turnstile check on public forms, so visiting Lusso does not expose your IP address to font or ad networks.
Section 04
4. Your choices
Allow or refuse analytics and marketing measurement, or change your mind, at any time on Privacy choices (linked in every page's footer): refusing is as easy as allowing, and turning analytics off deletes its ids from your browser. There you can also download or erase the analytics recorded from your browser and, in the USA, use "Do Not Sell or Share My Personal Information" (Lusso does not sell or share personal information). Global Privacy Control and Do Not Track are honoured automatically. You can also delete or block cookies in your browser settings. If you block strictly necessary cookies you will not be able to sign in or check out. If you delete the menu preference, the side menu simply opens expanded again. More about how we use personal data: Privacy Policy.
Section 05
5. Changes
If we ever want to use another cookie or storage item that is not strictly necessary, or another third-party service that measures visitors, we will update this notice first and ask for your consent before using it.
Keep reading
Related documents
-
Terms of Service
Read -
Privacy Policy
Read -
Your Privacy Choices
Read
Questions about this document? Contact us.