法律信息
权限与记录的局限
最后更新：6 十一月 2026
本文件以英文显示。目前还没有经过审校的中文（简体）译本，因此以英文版为准。
Lumara 浏览器扩展和 Android 配套应用可以访问什么、如何撤销，以及任何短视频追踪工具的局限。
Tracking limitations
- A website can’t see other apps. The Lumara website only knows what you time with its timer or type in yourself. It cannot monitor TikTok, Instagram, Snapchat, YouTube, Facebook, Pinterest or any other app on your phone or computer.
- No official platform access. Lumara does not use any official API from TikTok, Instagram, Snapchat, YouTube, Facebook, Pinterest or X, and never signs in to your social media accounts.
- Android usage time is whole-app time. Android’s Usage Access tells an app how long another app was in the foreground. It can’t tell Reels from the Instagram feed or messages, and it provides no video counts.
- Browser time is page time. The extension measures time on short-video pages in your browser while the tab is active and you’re not idle. It can’t see the mobile apps.
- Video counts are never exact unless you count them. A counted number is one you entered. Detected numbers from the extension are experimental (they count video changes in the page address). Estimated numbers are time ÷ an assumed typical video length.
- Gaps happen. Devices that are offline, switched off, signed out, missing permissions or running an unsupported version won’t report anything, and some platforms change their apps and websites without notice.
- No blocking. Lumara can’t block apps or send phone notifications. Use iPhone Screen Time → App Limits or Android Digital Wellbeing → App timers for that.
More detail: How we measure.
Browser extension permissions
The Lumara browser extension is a developer preview. It works only after you pair it with your account using a one-time code from Account → Connections.
| Permission | Why it’s needed | What it does not do |
|---|---|---|
Site access: tiktok.com, youtube.com, instagram.com, facebook.com, snapchat.com | To notice when the active tab is a short-video page (for example /shorts/ or /reels/) and time it. | Doesn’t read messages, comments, passwords, your feed or page content. Only the page address type and time are used. |
Your Lumara server (asked when you pair) | To send your timing records to your own account. | Sends nothing anywhere else. |
storage | To keep the device key and records that haven’t been sent yet. | Stored only in the extension on your computer. |
alarms | To save and send records every few minutes. | — |
idle | To stop timing when you step away from the computer. | Doesn’t record what you do elsewhere. |
Records it sends: platform, start and end time, and an optional experimental count of distinct video addresses. To revoke: disconnect the device in Account → Connections (optionally deleting what it sent), then remove the extension from your browser.
Android app permissions
The Lumara Android companion app is not released yet. When it is, it will work as described below.
| Permission | Why it’s needed | What it does not do |
|---|---|---|
Usage Access (PACKAGE_USAGE_STATS) — you grant it yourself in Android Settings | To read how long supported short-video apps were in the foreground. | Doesn’t read screen content, messages, notifications, contacts, location, photos or what you watch. Time for unsupported apps is ignored and never sent. |
| Internet | To send usage records to your own Lumara account over HTTPS. | No advertising or analytics SDKs. |
| Accessibility service | Not used. Any future experimental video detection would need a separate, clearly explained opt-in and would follow Google Play’s rules. | — |
The app must explain what it collects and ask before anything is collected. If you decline Usage Access, you can still log time manually. To revoke: Android Settings → Apps → Special app access → Usage access → Lumara → off, and disconnect the device in Account → Connections.
What Lumara never collects
- Social media usernames or passwords, and access to your social media accounts.
- Private messages, comments, contacts or the content of videos you watch.
- Screen recordings or screenshots.
- Data from apps or websites that aren’t supported short-video platforms.
You stay in control
- Pairing a device is optional, and you can disconnect it at any time.
- You can edit or delete entries in History, download all your data, or delete your account — see the data deletion policy.
- Questions about permissions: scroll@lumara.chat.
有疑问或隐私请求？
请发邮件至 scroll@lumara.chat 或使用我们的联系表单。隐私请求请选择主题“隐私或数据请求”。