Privacy policy

Data controller

Lureox — DELON Sébastien, French micro-entreprise, SIREN 108 497 579, 1 Rue Marguerin, 75014 Paris, France. Contact: contact@lureox.com.

Travel planning and locally stored data

The criteria you enter are used to plan your trip and calculate tool results. Files stored in this browser may include a destination, dates, traveller information, preferences, budgets, choices relating to cards, transport and activities, packing lists and a checklist. Do not enter identity documents, full bank details or medical documents in free-text fields.

Saved files and lists

Travel-planning files and lists are kept in the browser’s local storage. Signing in does not automatically create a remote copy or synchronise them across devices. You can manage files under “My account” and lists under “My lists”, or clear the website data in your browser. Clearing local data is separate from deleting an account.

Local data may remain until you delete it or the browser clears it. Private browsing, a shared device or blocked storage requires additional care. Keep essential travel documents separately.

The sharing feature creates a link containing the identifiers of the selected products. Anyone with that link can view the shared list.

Accounts and administration

Sign-in and the “My account” area use Supabase authentication. Your email address, account identifier, display name when provided and technical session information are used to authenticate you and manage access to your account. The display name can be changed under “My account”. Administration access is also authenticated.

This processing provides the account service you requested and helps keep it secure. To request access to, correction of or deletion of account data, write to contact@lureox.com. Signing out does not delete the account or trips stored in the browser.

Analytics and contact

With your consent, the referring domain of certain search engines may be sent to Google Analytics. Search terms, URL parameters, identifiers and travel dates are not included in the page views sent by Lureox. Google analytics are not loaded in local or preview environments.

With your consent, Lureox records a limited set of events to understand and improve user journeys: pages and product pages viewed, site searches, recommendation-engine starts and results, comparisons, additions to luggage, sharing and clicks to retailers.

Internal analytics use limited event and property categories: page path, language, device category, product identifier, button location, and journey counts and results. Free-text search fields and file contents are not intended to be included in these properties. Limiting fields does not mean that all technical processing is anonymous.

Internal analytics and Google Analytics depend on the choice shown in the preferences. Without valid consent, internal events are not recorded by the analytics service; refusing consent does not prevent retailer links from working. Permitted internal events are stored in Supabase and are not copied to hosting logs if that recording fails.

Your choice, whether positive or negative, is stored for no more than 180 days using local storage and a preference cookie. Previous consent limited to Google is not carried over to the broader analytics system. Withdrawing consent stops new analytics submissions; it does not by itself retrospectively delete events already collected. Essential connections and service security remain separate from analytics and may require technical information, including an IP address.

Where Google Analytics 4 is configured, it is loaded and sends the planned events only after your prior consent. You may refuse or withdraw consent through the cookie preferences without giving up the planning tools. Google then processes browsing information under its own documentation; this information must not be assumed to be anonymous.

Contact form

Your name, email address, subject and message are used only to respond to your request, on the basis of Lureox’s legitimate interest in handling enquiries. They are kept for as long as necessary to deal with the request and then for no more than twelve months, unless a different legal obligation applies.

No commercial registration or newsletter form is currently active. Any change will be explained separately and, where required by law, will be subject to prior consent.

Recipients and hosting

Authorised Lureox personnel and service providers may process data for their respective purposes: Vercel for hosting and logs, Supabase for authentication and server-side data, and Google for third-party analytics if you consent. Lureox does not sell personal data.

Your rights

You may request access to, correction or erasure of your data, restriction of or objection to its processing and, where the legal requirements are met, data portability, by writing to contact@lureox.com. State your request without sending identity documents unless asked; proportionate verification may be required if there is reasonable doubt about your identity. You may also lodge a complaint with the French data protection authority, the CNIL.