Last updated 1 August 2026, 18:15 ET
We collect what the service actually needs, and nothing we would be uncomfortable explaining.
None of it is sold, and none of it is used to build advertising profiles.
The sign-in and security data listed above exists to protect your account. By knowing the location, provider and device you normally use, we can notice when someone else tries to sign in, and we can trace a trade dispute if one occurs. While you are signed in, the website also refreshes which page is open roughly every 90 seconds so Customer Service knows where you are if you ask for help mid-task.
We do not use it for advertising, and we do not sell it.
Where data protection law requires a legal basis, we rely on: performing our contract with you (processing orders and trades), our legitimate interest in keeping Lucora secure and working properly, compliance with legal obligations such as tax and anti-fraud rules, and your consent where we ask for it.
Your account details, order history, and the bank or wallet details you save in Settings are stored in our database, so they are available each time you sign in from any device. Access is limited to your own account.
All traffic runs over encrypted HTTPS connections, and passwords are stored hashed rather than in readable form. No system is perfect, so please use a strong, unique password and keep your payment PIN to yourself — we will never ask you for it.
We keep account data for as long as your account is active. Order and trade records are kept longer where accounting, tax or anti-fraud rules require it. Once data is no longer needed, we delete or anonymize it.
Lucora is operated from the United States, and your data is processed on servers there. If you use Lucora from outside the US, you understand that your data will be transferred to the US, where privacy laws may differ from those in your country. Where required, we put safeguards in place so your data keeps an equivalent level of protection.
Depending on where you live, you may have some or all of the following rights:
If you live in California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you have the right to know what personal information we hold about you, to request a copy, to have it corrected or deleted, and not to be treated in a discriminatory way for using those rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. You can exercise these rights through Customer Service; we will verify your identity before acting on a request, and you may use an authorized agent.
We use your browser's local storage rather than tracking cookies. It holds: your sign-in session so you do not have to log in on every page, a cached copy of the brand list so the website loads faster, the countdown for an Exchange trade in progress, and unsaved form input.
There are no advertising or third-party tracking cookies on Lucora. Clearing your browser data removes all of it and simply signs you out.
Lucora is intended for users aged 18 and over. We do not knowingly collect personal information from children under 13, as defined by the Children's Online Privacy Protection Act (COPPA). If you believe a child has given us their data, contact us and we will delete it.
We may update this policy from time to time. For significant changes, we will notify you by email or on the website before they take effect, and update the "Last updated" date above.
Questions about your privacy? Reach our team through Customer Service, and we will get back to you.