What we keep, and why.
LureWright is run by a small team in Missouri. We collect the least we can get away with: an email address so you can sign in, a username so your shared work has a name on it, and the recipes you write. That is close to the whole of it, and the rest of this page is the detail.
Last updated September 24, 2026.
What we collect, and why
Your email address
Required. It is how you sign in — we send a short code to it instead of keeping a password — and how we would reach you about your account. We only send you anything else if you ask for the tips email. Nothing else is required to have an account.
Whether you want the tips email
Off unless you tick the box, at sign-up or on your profile. We keep when you changed it and where from — sign-up, your profile, or the unsubscribe link in an email — so we can show you asked for it.
A username
Required, and public. It is shown on any color or bait you share or publish, so choose one you are happy having on a printed sheet.
Your name, if you give it
Optional and private. It is never shown to anyone else.
What you make
The colors and baits you write. These are private to your account unless you choose to share or publish them.
A profile picture, if you add one
Optional and private: it is only ever shown to you, in the circle at the top of the page. Your browser crops it and scales it down before it is sent, which also drops any location or camera details stored in the original photo. Remove it on your profile and it is deleted.
A display preference
Which theme you picked, so the site looks the same on any device you sign in on.
When you signed in last
So we can tell an active account from an abandoned one.
What we do not collect
No password
There is nothing to leak, and nothing you have reused elsewhere.
No payment details
Purchases happen on our Shopify store, which handles payment and holds that information under its own privacy terms. Card numbers never reach this site.
No advertising cookies, and no profile of you
We do not advertise on this site, we do not sell or share what we hold, and nothing here builds a profile of you across other websites.
No selling or sharing
We do not sell your information, and we do not share it with anyone except the services below that are needed to run the site.
Counting visits
What it is for
We count visits with Google Analytics so we know which colors and baits people actually use, and whether anyone arrives from Instagram or TikTok. It tells us what to write more of. It is not needed to run the site, which is why you can switch it off and why in some places we ask first.
Where we ask before anything is stored
If you are in the EEA, the UK, Switzerland or Canada, nothing is measured unless you say yes, and declining is one click in the same place as accepting. Everyone is served the same site wherever they are — only the question differs.
Everywhere else
Measurement is on by default and you can turn it off at any time, below. Your IP address is anonymised before it reaches Google.
If your browser already said no
We honour Global Privacy Control. If your browser or an extension sends that signal, nothing is measured and you are never asked — you have already answered.
Who else handles it
Amazon Web Services
Hosts the site and the database, in the United States.
Amazon Simple Email Service
Sends your sign-in codes, and the monthly tips email if you asked for it. Your email address passes through it for those purposes only.
Google Analytics
Counts visits, where measurement is on. It sees anonymised IP addresses and what pages were viewed; it never sees your email address, your name, or anything private you have written.
Shopify
Runs the store at store.lurewright.com, if and when you buy something. What you do there is covered by Shopify’s privacy policy, not this one.
How long we keep it
Sign-in codes
Expire in ten minutes and are stored hashed, never as the code itself.
Sessions
Last until they expire or you sign out.
Your account and what you made
Kept until you ask us to remove it.
Anything you published
A published color or bait stays reachable even after it is retired, because printed sheets carry a QR code pointing at it. It keeps your username on it. If you want that removed as well, say so and we will handle it separately.
Your choices
See or correct it
Your profile is at /account, and you can change your name, username and picture there at any time.
Have it deleted
Email us and we will delete your account and everything private in it. Published work is the one exception above, and we will tell you exactly what that means for yours before we do anything.
Stop the tips email
Untick it on your profile, or use the unsubscribe link at the foot of any tips email. It takes effect straight away, and sign-in codes keep arriving either way.
Ask us anything about it
hello@lurewright.com. A person reads it.