Privacy Policy

Last updated: 2026-10-09.

What we collect

GemLuma collects only what's needed to operate the site and pay for it:

Newsletter signups — your email address, stored on our single Brevo mailing list, used only to send the newsletter you signed up for.
Checkout information — for the Crystal Prescription report or a donation, payment details are processed directly by Stripe; we never receive or store your full card number.
Analytics — aggregate usage data (pages viewed, general geographic region, device type) via Google Analytics 4 and Vercel Web Analytics, used only to understand which pages are useful and where the site has problems.
Contact form / email — if you email us or use our contact form (which delivers your message to our inbox through Brevo), we keep that correspondence only as long as needed to resolve your question.

Cookies

The site uses essential cookies required for basic functionality (like remembering checkout session state during a Crystal Prescription purchase) and analytics cookies set by Google Analytics to measure aggregate site usage; Vercel Web Analytics needs no cookies. Google's advertising cookies, which can be used across other websites, are explained in the next section.

Advertising

The stone profiles and guides on GemLuma are funded in part by display ads from Google AdSense. Google uses cookies to fill those ad spaces and track how they perform, and unless you have opted out it may tailor them to interests inferred from your wider browsing. Anyone visiting from the EEA or the UK sees Google's consent prompt first, no cookie for tailored ads is set without agreement there, and the choice stays open to change.

An advertiser cannot buy a kinder description of a stone: no profile, property or buying guide is adjusted for one, and no advertiser sees a page early. Many stone pages also link to that stone, or to a loupe or UV torch where a page names one, on Amazon as an affiliate, as the affiliate disclosure explains.

In Google My Ad Center you can check why an ad appeared and stop ad personalisation; aboutads.info hosts a combined opt-out for other ad networks, and Google describes how it uses advertising cookies in its advertising policy.

What we don't do

We do not sell your data to anyone, and we don't share your email address with any third party beyond the specific service processing it for you (Brevo for the newsletter and contact-form messages, Stripe for payments).

Your rights

Newsletter subscribers can unsubscribe at any time via the link included in every email. You can request a copy of the personal data we hold about you, ask us to correct inaccurate data, or request deletion of your data at any time — for any of these, or any other privacy question, contact contact@gemluma.com and we'll respond within a reasonable timeframe, generally within a few business days.

Data retention

Newsletter addresses are kept until you unsubscribe or request deletion. Analytics data is retained per our analytics providers' own standard retention periods and is not used to individually identify you.

Changes to this policy

If this policy changes in any meaningful way, we'll update the date at the top of this page. Continued use of the site after a change means you accept the updated policy.