Law Enforcement and Government Request Guidelines

Last updated: 28 September 2026

These guidelines are for law enforcement agencies and other government authorities requesting information about Lumy users. They explain the process we follow. They do not create any rights for any person or authority, and we may change them at any time. Users can read how we handle their data in our Privacy Policy.

1. Our approach

Lumy respects the privacy of the people who use Lumy and complies with the law. We disclose user information only in response to valid legal process that is properly served, or in the emergency circumstances described below. We review every request for legal sufficiency and may reject, narrow or challenge requests that are unclear, overbroad, not legally valid or inconsistent with our users' rights.

2. How to send a request

• Send requests as a "Legal" ticket through /support?cat=legal, or to our notices address, hello@luminary.gg, from an official government email address.
• Include: the name of the requesting authority and officer, official contact details, the legal basis, the specific account or project identifiers (such as the player name, account email or the project's /p/ address), the specific information sought, and the relevant time period.
• We do not accept requests from personal email addresses, and we may take steps to verify any request.
• Receiving a request through these channels does not waive any objection, including to jurisdiction or service.

3. Legal process

• We generally require a subpoena, court order, search warrant or equivalent legal process valid in Israel, where Lumy is subject to jurisdiction.
• Requests from authorities outside Israel may need to be made through a mutual legal assistance treaty or other recognised international process, unless the law allows us to respond directly.
• Requests for the content of projects, prompts, chats or messages generally require a search warrant or equivalent order.

4. What information may exist

Depending on the account, we may hold basic account information (player name, email, sign-in method, creation date), sign-in and access logs, projects and their version history, support tickets, and gameplay data for published projects. We keep data only for the periods described in our Privacy Policy; for example, security logs are kept for up to 90 days. We cannot provide data we no longer hold, and we do not see or store full payment card numbers.

5. Emergency requests

If an authority believes in good faith that there is an imminent risk of death or serious physical injury, it may submit an emergency request explaining the emergency, how the information would help, and the information needed. We may disclose information without legal process where we believe in good faith that disclosure is necessary to prevent that harm. We may ask for legal process to follow.

Members of the public who believe someone is in danger should contact local emergency services first, then report at /abuse.

6. Preservation requests

We will preserve relevant data we hold for 90 days on receipt of a valid preservation request pending formal legal process, and for one further 90-day period on a formal extension request.

7. User notice

Our policy is to notify affected users of requests for their information before disclosure, so they can seek legal advice, unless we are prohibited by law or court order from doing so, or notice would create a risk of death or serious harm, or would be counterproductive in an emergency. Where notice is delayed, we may notify the user when the prohibition or risk ends.

8. Child safety

We report apparent child sexual abuse material to the relevant authorities and child protection organisations as the law requires, and preserve related data.

9. Costs

We may seek reimbursement of reasonable costs of responding to requests where the law allows.

10. Civil and private requests

We do not disclose user data to private parties in civil matters without valid legal process or the user's consent. Copyright and trademark matters follow our Copyright, Trademark and Takedown Policy.