Privacy Policy

Lumina – SEO & GEO Chrome Extension · Last updated: March 19, 2026

1. Introduction

Lumina – SEO & GEO ("Lumina", "the Extension") is a browser extension for SEO and content analysis. This privacy policy explains what data the Extension processes, how it is handled, and what third-party services may be involved.

Lumina is developed by Julien El-Bahy.

2. Data Processing Overview

Lumina does not operate its own servers. The Extension runs entirely in your browser. All page analysis is performed locally on your device. Lumina does not collect, transmit, or store any user data on external servers owned or operated by the developer.

3. Data Processed Locally

When you open Lumina on a webpage, the Extension reads the following data from the currently active browser tab:

Page metadata (title, meta description, canonical URL, robots directives, language, publish date, modified date), heading structure (H1 through H6), links (internal, external, anchor text, rel attributes), images (source URLs, alt text, dimensions), structured data (JSON-LD, Microdata, RDFa), Open Graph and Twitter Card tags, HTML semantics and accessibility attributes, and the visible text content of the page.

This data is processed locally in your browser to generate the SEO analysis displayed in the Extension popup. It is not sent anywhere unless you explicitly use a feature that requires an external API (see Section 5).

A temporary analysis cache is stored in your browser's session storage for up to 10 seconds to allow the popup to reopen quickly. This cache is automatically cleared when the browser session ends.

4. Data Stored Locally

The Extension uses Chrome's local storage to save your preferences and API credentials:

These credentials are stored locally in your browser and are never transmitted to any server other than the respective API provider when you use the corresponding feature.

You can remove all stored data at any time by disconnecting your accounts in the Extension settings or by uninstalling the Extension.

5. Third-Party API Services

Lumina integrates with the following third-party services. Data is sent to these services only when you actively use the corresponding feature, and it is sent directly from your browser to the respective API provider. Lumina does not act as an intermediary.

Google Search Console API (webmasters.readonly scope): When you connect your Google account, the Extension uses OAuth 2.0 to obtain an access token. This token is used to fetch your Search Console performance data (queries, pages, clicks, impressions, CTR, position) and URL inspection status directly from Google's API. The Extension requests read-only access and cannot modify your Search Console data.

Google Analytics Data API (analytics.readonly scope): When you connect your Google account for GA4, the Extension uses a separate OAuth 2.0 flow to obtain an access token. This token is used to fetch your Google Analytics 4 property data including sessions, users, pageviews, engagement rate, bounce rate, conversions, traffic sources, landing pages, and user journey data directly from Google's Analytics Data API. The Extension requests read-only access and cannot modify your Analytics configuration or data.

OpenAI API: When you use the AI-powered tools (Content Optimizer, Meta-Tag Generator, Competitor Analysis, GEO/LLM Simulation, FAQ Schema Generator, Ask AI), excerpts of the current page's content, headings, and metadata are sent to OpenAI's API (api.openai.com) for analysis. Your own OpenAI API key is used for authentication. Lumina does not store or log the content sent to OpenAI.

DataForSEO API: When you use the keyword research features, the SERP Checker, or the SERP Overlap Tool, keyword queries, location codes, language codes, and device type are sent to DataForSEO's API (api.dataforseo.com) to retrieve search volume data, keyword metrics, and real-time Google search results including organic rankings, SERP features, and related searches. Your own DataForSEO credentials are used for authentication.

Google PageSpeed Insights API: When you run a PageSpeed analysis, the current page URL is sent to Google's PageSpeed Insights API to retrieve performance scores and Core Web Vitals data. Your own API key is used for authentication.

Each of these third-party services has its own privacy policy and terms of service:

6. Google API Services User Data Policy

Lumina's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Not Collected

Lumina does not collect personally identifiable information such as names, email addresses, or phone numbers. Lumina does not track browsing history or record which websites you visit. Lumina does not use analytics, tracking pixels, or telemetry of any kind. Lumina does not display advertisements. Lumina does not sell, share, or transfer any user data to third parties for any purpose.

8. Permissions

The Extension requests the following browser permissions, each used solely for its stated purpose:

9. Data Security

All API credentials are stored in Chrome's encrypted local storage. Authentication tokens for Google Search Console and Google Analytics are handled through Chrome's built-in identity API with OAuth 2.0. No credentials are ever exposed in the Extension's user interface, transmitted to the developer, or shared with any party other than the intended API provider.

10. Children's Privacy

Lumina is not directed at children under the age of 13 and does not knowingly collect any data from children.

11. Changes to This Policy

This privacy policy may be updated from time to time. Any changes will be reflected in the "Last updated" date at the top of this document. Continued use of the Extension after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this privacy policy or the Extension's data practices, please contact:

Julien El-Bahy
Email: julien.elbahy@gmail.com
LinkedIn: linkedin.com/in/julien-el-bahy-b4b71a201