Privacy Policy
Scope and contact
This notice describes the public browser test at journal.lux-xiv.com as of 19 September 2026. The project creator uses the in-game name Nika Nini. Legal controller identification and a service address are still being prepared; this notice is incomplete until those details are supplied. See Legal Notice. For privacy enquiries, email contact@lux-xiv.com.
Information saved on your device
Your linked characters, imported achievements, collection checkboxes, pins, notes, tasks and preferences are saved in this browser's local storage. Each character has a separate journal. The public test does not send journal entries to an account database and does not offer accounts or synchronisation between devices.
This storage supports the journal you choose to use. It remains until you clear this site's browser data or your browser removes it. Removing that data deletes the locally saved journal. There is currently no export or recovery service.
Character imports
When you request an import or status check, the character's public Lodestone ID and the requested achievement or page are sent to our Cloudflare-hosted service, which requests the corresponding public page from SQUARE ENIX. The response may include the character's name, world, avatar and completed achievements. Responses may be cached for 60 seconds. We do not request your Square Enix password or access private achievements.
This information is used to carry out your requested import. Previously saved completion data is preserved if an import fails. Public availability does not remove a person's data-protection rights.
Hosting and security
Cloudflare delivers the website and processes connection information such as IP addresses, request URLs, browser information and request times. Import protection uses a daily-changing hash derived from the connecting IP address as a temporary rate-limit key. This is pseudonymous, not anonymous.
Application warnings contain generic error labels; automatic application invocation logging is disabled. Cloudflare may separately process security and operational information under its service policies. Platform retention and international-transfer arrangements require a final review before the full launch.
Processing necessary to deliver and protect this service is based on legitimate interests in operating a functional, secure website (Article 6(1)(f) GDPR), subject to the applicable conditions. Cloudflare privacy information.
External images and fonts
Game icons and character images may load from XIVAPI and SQUARE ENIX servers. Fonts currently load from Fontshare. Those providers receive the network information needed for these requests, including your IP address. Interface icon files are served with this website.
External asset delivery supports the journal's presentation. Providers may process requests outside the European Economic Area. The legal basis and transfer safeguards for external delivery are part of the remaining privacy review; self-hosting permitted assets is an alternative under consideration.
Provider information: SQUARE ENIX, Fontshare. Sources and usage licenses are listed in Legal Notice.
Analytics, payments and communication
The application does not include advertising, marketing trackers, payment forms or mailing-list subscriptions. Hosting services can still produce operational traffic statistics. You can contact us at contact@lux-xiv.com; there is no contact form in this test. If you email us, your email address, message and any attachments are processed through Google Workspace to handle your enquiry. Please avoid sending passwords or unnecessary personal information. Correspondence is kept for as long as needed to handle the enquiry and any applicable retention obligations. Google Workspace data processing terms.
Your choices and rights
You can use the journal without importing a character and can clear its local data through your browser's site settings. You may request access, correction, deletion, restriction and, where applicable, portability of personal data. You may object to processing based on legitimate interests and lodge a complaint with a competent data-protection supervisory authority.
These rights depend on the processing and applicable legal conditions. We cannot recover local entries after your browser deletes them. Send privacy requests to contact@lux-xiv.com.