The short version
The products never phone home
Every product here is a single file that runs in your own browser. It makes no network requests at all, by construction: the build refuses to ship a file that reaches out. Whatever you write in it stays on your device. We cannot see it, recover it or hand it to anyone, because it never reaches us.
The site itself
Reading these pages sets no cookie and sends us nothing. Measurement only starts if you allow it. Buying and writing to support do involve data, and the rest of this page says exactly which.
There is no database
This site keeps no customer database of its own. What exists about a purchase lives with Stripe, and what exists about a support message lives in an email inbox.
Who we are
Lua Imagined is the product house of Lua Dias Studio. The business responsible for this site, and the data controller for the purposes of the GDPR, is Lua Dias LLC, Alpharetta, Georgia, United States.
Everything here is run by one small team. The quickest way to reach a person is the form at luaimagined.com/support.
What we collect, and when
When you only read. Nothing. No cookie is set, no account exists, and nothing is sent to us. Our host, Vercel, keeps short-lived server logs that include IP addresses, which is ordinary infrastructure logging and is needed to serve and protect the site.
When you allow measurement. If you press Allow on the banner, Google Analytics 4 sets cookies and records which pages you saw, roughly where you are, which device and browser you used, and four events: viewing a product, starting a checkout, completing a purchase, and downloading a free file. Until you allow it, the tag runs in a mode that sets no cookie and stores nothing on your device. Pressing No thanks keeps it that way, and the site works the same either way. You can change your mind by clearing this site’s data in your browser, which makes the banner ask again.
When you buy. Payment is handled by Stripe, which is the merchant of record for the sale and appears to you as Link. Stripe collects your email, name, billing address and payment details, and charges your card. We never see or hold your card number. From Stripe we receive, and can see in their dashboard, your email address, name and billing address, plus what you bought and what you paid. The billing address is not optional curiosity: it is what the tax on your order is calculated from.
Your download link. After a purchase we build a link that contains the product you bought, your email address and an expiry date, signed so that it cannot be altered. That link is shown to you and emailed to you. It is not stored on any server of ours, and it stops working after one year.
When you write to support. The form asks for your email, which product, an optional order reference, and your message. That is emailed to us and read by a person. It is not put in a database. It stays in an email inbox for as long as the conversation is useful.
When you use the contact button. The button in the corner asks for your email and a message, and notes which page you sent it from. That arrives as a Telegram message to Lua and is read by her. It is not put in a database.
Who else is involved
These are the only companies that touch anything about you, and what each one is for:
Processors
Stripe, including Link — payment, tax, invoices, receipts, refunds and payment disputes. Stripe is the merchant of record, so your purchase is legally with them and your card statement shows LINK.COM. They also handle requests to delete the data attached to a purchase.
Vercel — hosting and server logs.
Postmark — delivering the support message you send us, and the email carrying your download link.
Telegram — delivering what you send through the contact button.
Google Analytics — counting visits, and only if you allowed it.
We do not sell your data, we do not share it for advertising, and we do not buy data about you from anyone.
Cookies and browser storage
This site sets no cookies of its own. Google Analytics sets cookies, and only after you allow it.
One thing is kept in your browser’s local storage regardless: your answer to the banner, so that we do not ask on every page. It is a single value that says granted or denied. It never leaves your device.
The payment page is hosted by Stripe on their own domain and follows their cookie practices, not ours.
How long things are kept
Download links stop working one year after the purchase. Purchase records are kept by Stripe for as long as tax and accounting law requires, which is typically several years. Support emails stay in the inbox while the conversation is useful. Analytics data is kept by Google under the retention setting on the property, and only exists for people who allowed it.
Your rights
Depending on where you live, you may have the right to ask what we hold about you, to get a copy, to have it corrected or deleted, to object to how it is used, and to withdraw a consent you gave. People in the European Economic Area and the United Kingdom have these under the GDPR; people in California and several other US states have comparable rights.
Ask at luaimagined.com/support and a person will answer. For anything attached to a purchase, Stripe handles deletion requests as the merchant of record, and we will point you to them or pass the request on.
We are based in the United States, so data about you is processed there. If you are in the EEA or the UK and you think we have got something wrong, you can also complain to your local data protection authority.
Children
These products are not aimed at children, and we do not knowingly collect anything from anyone under 16. If you believe a child has sent us something, write to support and it will be deleted.
Changes
If this page changes in a way that matters, the date at the top changes with it. This version is from 4 October 2026.