Our Approach to Privacy

Our philosophy is that user data is a liability, not an asset, so we will avoid collecting personally identifying information (PII) whenever possible.

We in no way make any money selling your data. We earn an affiliate commission when you buy one of our recommendations as a reward for driving the sale. We have zero need (or desire) to know who you are, how you like to shop or what websites you like to visit.

What we use the extension data for in general

These are the kinds of questions we want to answer with the data that we do collect:

  • What product categories are popular?
  • How well does our product work within those categories?
  • When given a recommendation, is that the product that was actually purchased?
  • How many people are using our product?
  • What features do people find valuable & which are being ignored?
  • What data do people find useful to make a purchasing decision?

Not a single one of those questions require us to know what any individual user is up to. We look at 100% anonymized aggregate data to see what features are being used and what people find useful to help them choose what to buy.

In fact, as of today there's not even any user accounts on Lustre. We don't have a single place to store any user-level data in any of our databases.

When do we collect data?

Although the Chrome store required us to ask for permission to "read and change site data on all the websites you visit" this is NOT what we're actually doing.

The only time we collect any data at all is when you're on a handful of retail or shopping websites performing shopping searches. We do not touch your emails or any other browsing in any way. We welcome the Chrome team to change the way permissions work so we can easily request a more limited set of data.

Here's exactly the data we collect and what we use it for

Completely anonymized search queries on ecommerce sites (currently limited to Amazon.com). We look at this data in aggregate to determine what products and product categories are popular in order to understand where to focus. In particular, we try to identify deficiencies in our product and category coverage.

Example:  { “query”: “usb-c ssd”, “site”: “amazon” }

Completely anonymized product pages. Like above, we look at this data to determine what products are popular

Example:  { “sku”: “B0000ABCDE”, “store”: “amazon” }

Completely anonymized purchase information.

Example:  { “sku”: “B0000ABCDE”, “store”: “amazon”, "purchased": yes"}

HTTP server logs, which include IP address and User Agent. Like most websites, our web servers log information about the requests and responses. As a general rule, when we examine logs, we’re not paying attention to either the IP address or User Agent. However we may occasionally look at similar requests when debugging. We make no attempt to tie those requests to any specific user.

Example: 127.0.0.1 - - [29/Oct/2019:11:36:12 +0000] "GET /userInfo?format=json HTTP/1.1" 200 1000 "https://www.Lustre.co/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36 RuxitSynthetic/1.0 v203006225 t5203650253559719493"

We currently use event Analytics via Google Analytics and Amplitude. In the future we plan to phase out Amplitude as it collects more data than we’d like, but currently we use it for generic user-flow analysis and nothing at the per-user level. The moment we can afford to do so we will replace these services with our own that only collect minimal data. But for the sake of transparency you should be aware we are running them. Sorry.

Example: 191 users clicked "Filter products". 92 of those users then successfully filtered the list of recommendations. 12 of those users clicked on one of the products shown.

What we mean when we say "anonymized"

When we say “completely anonymized”, we mean that there is no personal data attached at all. No tracking cookies, no IP addresses, no user agents, etc. Just the data described and a timestamp. 
Lustre links out to numerous websites, including links to product reviews and stores which sell those products.

Our links to stores may be affiliate links, allowing us to earn a commission on products purchased. Affiliate links do not contain any PII, and we do not receive reports about any individual users’ purchases. Affiliate sites may provide reporting on aggregate customer purchases. Note that outside sites have their own privacy policies which are out of our control.

Future offerings may include personalization. Those products will be opt-in, and be covered by additional policies clarifying any expanded data collection.

How to contact us

Got questions? Want more proof? Email us at [email protected] or write to us at:

400 S El Camino Real
San Mateo, CA, USA, 94402
Suite 710