How LuxID protects the data you share
Whichever app or service you sign in to with LuxID, the same protections apply. This page explains what is shared, what an app can and cannot do with it, and how you stay in control. For how the sign-in screen works, see Sign in with LuxID.
LuxID's privacy promises
- LuxID always shows you what will be shared before anything is shared, and only shares what you agree to.
- LuxID never shares your password with the app.
- LuxID does not receive access to your account on the app.
- LuxID does not sell or monetise your data, and does not use it for advertising unless you give your explicit consent.
- You can review or remove any connection at any time from account.luxid.lu (opens in a new tab) > Applications.
How an app uses your data
When you sign in, the app receives a pseudonymised identifier (a code that recognises you without revealing who you are) and any details you agreed to share, which may include your name or email address.
From the moment you share, the app becomes responsible for how it handles your data on its own side. It must tell you how it uses your data and, if it wants to use it for anything beyond providing its service, it must ask for your explicit consent.
To help you decide before you share, LuxID lets each app show links to its terms and privacy policy on the sign-in screen. Apps are not required to provide them, so they may not always appear; when they do, review them before you agree. Otherwise, you can usually find the privacy policy on the app's own website.
How long your data is kept
How long an app keeps your data depends on its retention policy, not LuxID's. Read the app's privacy policy to understand this.
Revoking an app's access stops further sharing, but it does not necessarily delete the data the app already holds - to have that deleted, contact the app directly. See Sign in with LuxID for the steps to revoke a connection.
Before you connect to an app
Only connect to apps and services you trust. When you give an app access to your LuxID data, keep in mind:
- Security - if the app's servers are breached, the data it holds could be exposed. LuxID cannot protect data stored on another company's servers.
- Data use - the app may use or share your data as described in its own policy.
- Data deletion - removing your data from the app's servers may not be quick or automatic; you may need to ask the app directly.
- Policy changes - the app may change its policies without notifying you directly.
If you have concerns about an app
LuxID cannot review in depth every app that connects to it - particularly apps that are not aimed at the general public, such as apps still in development or limited to a single organisation. Before you share, check that you recognise and trust the app asking for access.
That said, the LuxID ecosystem is small and managed: LuxID knows its Partners. If you ever feel an app is not handling your data correctly, let us know - we can look into it and, where needed, act with the Partner.