Privacy.

This software is not provided or supported by Linden Lab, the makers of Second Life. Lumen is not affiliated with Linden Lab or the Firestorm project. There is no customer support.

In short: nothing is sent to me, the person who makes Lumen. There are no accounts, no analytics and no crash reports. What leaves your computer goes to Second Life, as it does with any viewer, and to the AI provider you choose — and only when you use the assistant.

Lumen starts with no provider chosen, and then nothing is sent anywhere. Once you pick one in Preferences → AI, each request you give the assistant goes to that provider, together with what its tools look up to answer it. Depending on what you ask, that can be:

• what you type or say to the assistant, and your avatar's name;
• the memory note you write for it, and anything you ask it to remember;
• the names, creators and folders of things in your inventory;
• the text of notecards it reads or searches for you;
• local chat, instant messages and group notices it reads for you, and your saved chat logs when you ask about an earlier conversation;
• the names of people and objects near you, and what people have published in their profiles;
• the viewer's own state: where you are, what you are wearing, its settings and the windows that are open.

Answering your messages while you are away works the same way, and is off until you ask for it.

That provider's privacy policy is the one that applies to it. A model running on your own computer, through Ollama or LM Studio, sends nothing anywhere.

From Lumen 0.1.5 there is a microphone button. On a Mac it uses Apple's speech recognition: for some languages it runs on your Mac, and for others — Danish among them — what you say is sent to Apple to be turned into text, and Apple's privacy policy applies.

On Windows it uses Whisper, which runs on your computer: what you say is turned into text there and is not sent anywhere for that. The recording is deleted as soon as it has been read. Whisper needs a one-time download of its speech model (190 MB) from Hugging Face, and Lumen asks you before it fetches it; you can remove it again in Preferences > AI > Assistant.

On both, only the text goes to the assistant, as if you had typed it. Voice chat's microphone is shut while it listens, so nobody in Second Life hears what you say to the assistant.

• GitHub, once at login, to see whether a newer release is out. It sends nothing about you, though GitHub sees the request as any website would.
• Second Life's own search and Marketplace, when you ask the assistant to search them.
• Primfeed, when you ask whether somebody has a Primfeed page — Primfeed can then tell that someone looked that name up.
• Hugging Face, on Windows, once, to download Whisper's speech model — only after you say yes to it.
• A translation service, only if you switch on chat translation in Preferences → Chat (off unless you do), as in Firestorm: the chat it translates goes to the service you pick.
• Codex, Claude Code and Mistral Vibe, if you choose one of them, are programs from OpenAI, Anthropic and Mistral that talk to their own servers, on your own account, under their own terms.

• The memory note and the list of things you asked it to remember, kept per avatar.
• A copy of your notecards' text and of where your landmarks go, so that searching them is quick.
• Your API keys, in the viewer's protected store. That is obfuscation rather than encryption.
• Codex, Claude Code and Mistral Vibe keep their own record of each conversation, as they do when you use them directly.
• Chat and instant message logs are the viewer's ordinary logs, as in Firestorm, and can be switched off in Preferences.
• A Debug Setting for finding faults, LumenAILogRequests, writes each full request to the AI into the viewer's log file on your computer. It is off unless you switch it on.

These pages count visits without cookies and without storing your IP address: a visit is recorded as a one-way code made from your address, your browser and the day, so the count can tell visitors apart on one day and not from one day to the next. The country comes from DB-IP's free country list.

Last changed 2 October 2026.