Privacy Policy

1. Who we are

Luna (“Luna”, “we”, “us”, “our”) is operated by [COMPANY LEGAL NAME], [COMPANY ADDRESS], [JURISDICTION]. We are the “data controller” for the information described in this policy. If you have any question about your privacy, contact us at [privacy@your-domain].

2. Who Luna is for

Luna contains explicit adult content and is intended only for adults — you must be at least 18 years old, or the age of majority in your jurisdiction if that is higher, to create an account or use the service. We do not knowingly collect data from anyone under that age. If we learn that we have, we will delete it.

3. What information we collect

We collect only what we need to give you a working, personalised, secure experience.

Information you give us

• Account details — your email address, and your password (which is never stored in readable form — it is stored only as a secure, one-way hash).
• Profile & personalisation — an optional first name and nickname, your chosen language, and your body configuration, so tasks can be written to fit you.
• Your preferences and kinks — the play types you enable, your strictness settings, the implements, toys, and items you mark as available, and any locations or activities you block. This is the sensitive data at the heart of Luna, and it is encrypted at rest (see section 4).

Information created as you use Luna

• Session activity — the play sessions (“playdates”) you run and their progress, so the experience can adapt to you. The preference data attached to a session is also encrypted at rest. Sessions you mark as paranoid are ephemeral and automatically deleted (see section 5).

Information we collect automatically

• Security and operational data — the minimal technical information needed to keep the service running and secure (for example, a request identifier for troubleshooting, and authentication data if you enable two-factor authentication). We deliberately keep sensitive preference data out of our server logs (see section 4).

We do not collect precise location, we do not run third-party advertising trackers, and we do not build advertising profiles about you.

4. How we protect your most sensitive data

This is the part we care about most, so here is exactly what we do.

• Your kinks and preferences are encrypted at rest. All of your preference data — the play types you enable, your strictness, your available implements, toys, and items, and your blocked activities and locations — is encrypted using strong, authenticated encryption before it is written to our database. If our database were ever exposed, this data would appear only as unreadable ciphertext.
• Per-session data is encrypted too. When a playdate is created, the preference data it needs is copied onto that session — and that copy is encrypted at rest with the same protection, so your kinks are never sitting in plain text anywhere in our database.
• Your two-factor authentication secret is encrypted. If you enable two-factor authentication, the secret that powers it is stored encrypted, not in the clear.
• We keep sensitive data out of our logs. Ordinary web applications routinely write request data into server logs. We specifically filter your preference and kink data out of our logs, so it isn’t quietly duplicated into places that are harder to protect.
• Encryption in transit. All traffic between your device and Luna is protected with HTTPS.
• Account security. Passwords are stored only as secure one-way hashes, and you can enable two-factor authentication for an extra layer of protection.

No system can promise perfect security, and we don’t pretend otherwise — but we have designed Luna so that your most intimate data is protected by multiple, deliberate layers.

5. Paranoid sessions

Some things you may want to do without leaving any trace at all. That’s what paranoid sessions are for.

• When you start a session in paranoid mode, Luna treats it as strictly temporary.
• A paranoid session is automatically and permanently deleted — as soon as it finishes, or after a short period of inactivity (within about a day) — by an automatic clean-up that runs every day.
• Once a paranoid session is purged, it is gone from Luna; it does not remain in your history.

Paranoid mode lets you enjoy Luna knowing that particular session simply won’t stick around.

6. How we use your information

We use your information only to provide and improve Luna for you:

• to create and secure your account and let you sign in;
• to personalise and generate your tasks and sessions based on your preferences and body configuration;
• to remember your settings between visits;
• to keep the service reliable, safe, and free of abuse;
• to communicate with you about your account (for example, account confirmation or password resets), and, only if you have opted in, occasional product updates.

We do not sell your personal data. We do not share it with advertisers. We do not use your kinks, sessions, or preferences to profile you for any third party.

7. When we share information

We keep your data to ourselves except in a few limited, necessary cases:

• Essential service providers (“processors”). We rely on a small number of trusted vendors to run Luna — for example, secure cloud hosting and transactional email delivery (such as account-confirmation and password-reset emails). These providers may process data only on our instructions and only to perform their service for us. If you have opted in to product updates, we may use an email/newsletter provider for that specific purpose.
• Legal requirements. We may disclose information if we are legally required to, or to protect the rights, safety, or security of our users or the service — always limited to what is necessary.
• Business transfers. If Luna is ever involved in a merger, acquisition, or sale of assets, we will tell you before your information becomes subject to a different privacy policy.

8. How long we keep your data

• Paranoid sessions are deleted automatically, as described in section 5.
• Your account and preferences are kept for as long as your account is active, so Luna works the way you set it up.
• When you delete your account, we delete your personal data and preferences, except for anything we are legally required to retain for a limited period.

9. Your rights and choices

Depending on where you live (for example, under the EU/UK GDPR or similar laws), you have rights over your data, including the right to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• delete your data (“right to erasure”);
• export your data in a portable format;
• object to or restrict certain processing; and
• withdraw consent at any time where we rely on it (for example, marketing emails).

You can exercise many of these directly in the app — you control your preferences, can use paranoid sessions, and can delete your account. For anything else, contact us at [privacy@your-domain] and we will respond within the timeframe required by law. You also have the right to complain to your local data-protection authority.

10. Cookies and similar technologies

Luna uses only the cookies and local storage needed to make the service work — for example, to keep you signed in and to remember your preferences. We do not use advertising or cross-site tracking cookies.

11. International data transfers

We may process and store data in countries other than your own. Where we do, we take steps to ensure your data receives a level of protection consistent with this policy and applicable law, using appropriate safeguards such as standard contractual clauses where required.

12. How to reach us

Questions, requests, or concerns about your privacy? Contact us at:

• Email: [privacy@your-domain]
• Postal address: [COMPANY LEGAL NAME], [COMPANY ADDRESS]
• Data Protection Officer / privacy contact: [NAME OR ROLE, if applicable]

13. Changes to this policy

If we make material changes to this policy, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of Luna after changes take effect means you accept the updated policy.