When you make an account, post, message somebody or buy something, you are trusting Luma Sonara Drava with information about yourself. This page says plainly what is done to protect it — and what you can do too.
Between you and the site
Pages, sign-ins, messages and uploads travel over an encrypted (TLS) connection, so they cannot be read or altered by anybody between your device and the site.
Passwords and credentials
Your password is never stored. What is stored is a one-way hash of it, which can check a password you type but cannot be turned back into one — so nobody who runs the site can tell you what your password is, and a copy of the database does not reveal it.
Keys and access tokens that let the site talk to other services on your behalf — a connected account, for example — are encrypted before they are stored.
Card payments
Card details are entered into a payment processor's own secure form and go straight to the processor. Luma Sonara Drava never sees or stores your full card number; it keeps only what it needs for a receipt, such as the amount and what it was for.
A record of who did what
Sign-ins are recorded with the device and approximate location they came from, and actions that change security settings or touch other people’s data are logged: who, when, from which address, and whether it succeeded. That record is how a suspicious sign-in or a misused account gets noticed and traced.
The log records the action and the identifiers — never the contents. An audit trail that quietly becomes a second copy of everybody’s messages is a liability, not a control.
Deletion you can check
When a record is destroyed, Luma Sonara Drava can issue a signed certificate: a fingerprint of the data that was deleted, the time, and an ID. The certificate holds no personal data — only the fingerprint — and anybody can check one at lumasonaradrava.com/verify-deletion without an account.
“We deleted it” is a claim. A certificate is a record that the person who asked can verify for themselves.
What we will not do
- We will not sell your personal information.
- We will not use your messages or your private content to train any AI model, ours or anybody else’s.
- We will not share your information with advertising networks.
- We will tell you about a breach affecting your data without undue delay once we have confirmed it, and as the law requires.
The kinds of service provider we rely on, and what each receives, are set out in the Privacy Policy.
What you can do
- Use a password you do not use anywhere else, and change it if you think it has been seen.
- Turn on any extra sign-in protection your account settings offer.
- Be wary of messages asking for your password or a sign-in code — we will never ask you for either.
- Sign out on shared or public devices.
Reporting something
If you have found a security problem in Luma Sonara Drava, contact us at marcccoraty@gmail.com with enough detail to reproduce it. We will confirm receipt and tell you what we are doing about it.
Last updated 24 September 2026.