Cookie Policy
Last updated: 2026-10-20
1. What this policy covers
Cookies are small text files a website stores in your browser. Similar technologies — local storage, session storage and IndexedDB — let a site keep information in your browser too. This policy covers all of them.
Rushlume uses no advertising, analytics or tracking cookies, no tracking pixels and no fingerprinting that would recognise you across days or websites. We only use storage that is strictly necessary to provide the Service you asked for, or that remembers a choice you made. Under the ePrivacy rules (Art. 5(3) of Directive 2002/58/EC, §109(8) of Slovak Act No. 452/2021 Coll. on electronic communications) these do not require your consent, so we do not show a consent banner.
2. Cookies
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
__Secure-better-auth.session_token (on HTTPS; better-auth.session_token otherwise) | Rushlume (first party) | Keeps you signed in and protects your account | 30 days, renewed daily while you use the Service; if you untick "Keep me signed in", until you close the browser | Strictly necessary |
Other better-auth.* cookies (e.g. a "don't remember me" marker, Google sign-in state) | Rushlume (first party) | Sign-in mechanics; Google sign-in protection against forged requests | Browser session or a few minutes | Strictly necessary |
signup-consent, signup-consent-lang | Rushlume (first party) | Carry your terms and age confirmation, and the language you read them in, through "Sign up with Google", so the account is created with them | 10 minutes | Strictly necessary (set only when you sign up with Google) |
device | Rushlume (first party) | A random number for this browser (not derived from your device), sent with a sign-up so we can limit how many free accounts one browser creates. We keep only a keyed hash of it | 1 year | Strictly necessary (set only on the sign-up page; abuse prevention) |
lang | Rushlume (first party) | Remembers the language of the website you chose or last opened | 1 year | Preference |
ws-side-collapsed | Rushlume (first party) | Remembers whether you collapsed the sidebar | 1 year | Preference (set only when you choose) |
3. Browser storage (local storage, session storage, IndexedDB)
| Key / database | Purpose | How long |
|---|---|---|
ws-side-collapsed (local storage) | Copy of your sidebar preference | Until you clear site data |
device (local storage) | Copy of the sign-up browser number above, so clearing only cookies does not reset it | Until you clear site data |
playback-volume:… (local storage) | Remembers the volume you set for the video player and the song preview | Until you clear site data |
rl-ready:… (local storage) | Remembers that the "ready" animation of a finished video has already played | Until you clear site data |
edit-settings:… (session storage) | Your unsaved edit settings | Until you close the tab |
operation:… (session storage) | Prevents the same action from being submitted twice | Until you close the tab |
uploaded-clips-v1:…, upload-v1:… (session storage) | Lets an interrupted upload resume and avoids uploading the same clip twice | Until you close the tab |
rl-watch, rl-ready-pending:… (session storage) | Lets the app tell you when an edit started in this tab is finished | Until you close the tab |
rl-intro, rl-auth-art (session storage) | Plays the opening animation of the home and sign-in pages only once | Until you close the tab |
device-songs (IndexedDB) | Keeps your song file on your device, so it never has to be uploaded to us | Until you clear site data |
None of this information is sent to third parties. The song file stored in device-songs never leaves your device.
4. Third parties
When you upload or download videos, your browser connects directly to our storage provider (Cloudflare R2) using short-lived links; Cloudflare receives your IP address as part of that connection but sets no cookies for us. If you choose "Sign in with Google", Google may set its own cookies on its sign-in pages under Google's cookie policy.
Our fonts are served from our own website; no font or advertising service receives your visit. When you choose a paid plan, the payment page is run by our reseller Stripe (Link), which sets its own cookies there under its own cookie policy.
Visit statistics. We count page visits with Vercel Web Analytics, run by our host Vercel as our processor. When you open a page, a small script from our own website sends Vercel the page address (without query parameters), the referring website, and your browser, operating system, device type and country. It sets no cookies and stores nothing in your browser. To tell visits apart, Vercel forms a hash from the request that changes every day and is not kept. We see only aggregated numbers. More in our Privacy Policy.
5. How to control cookies
You can delete cookies and site data in your browser settings at any time. If you block or delete the session cookie, you will be signed out and cannot use the signed-in parts of the Service. Deleting site data also removes the songs saved on that device; you can select them again.
6. Changes
If we ever add cookies that are not strictly necessary (for example analytics), we will ask for your consent first and update this policy.
7. Contact
- Branislav Milke, Branisková 22, 040 01 Košice
- Email: privacy@rushlume.app
More about how we process personal data: our Privacy Policy.