Privacy

• Your account — the email you sign up with and your password, stored only as a scrypt hash (we never see the password itself). If you sign in with Telegram — your Telegram ID, name and username.
• The letter itself — the recipient's name, the text, photos, music, reply options. All of it you type yourself. Files sit in private storage; links to them are signed and expire.
• Letter events — opened, accepted, declined, replied, finale, and the time of each, plus the recipient's reply text, shown only to the author. We record neither the recipient's address nor their device.
• The payment — who paid, for which letter, by what method, the amount and the transaction number at the payment provider. Card and wallet numbers never reach us.
• Cookies — sign-in (90 days), chosen language (a year) and a one-time sign-in marker (15 minutes). No advertising cookies.
• A visit counter — how many times a page was opened, which site you came from, country and device type. No cookies, no profiles: we see numbers, not people, and none of it is tied to your account.

• to show the letter to whoever you gave the link;
• to tell you “she opened it” and “she said yes”;
• to take the payment and open the paid features;
• to add gifted letters to the balance;
• to delete everything when its time is up.

We don't sell data and we don't show ads.

Only those without whom the service doesn't work:

• Lemon Squeezy — our reseller and merchant of record for card payments, when card payments are on. Card details never reach us.
• Vercel and Supabase — hosting and database.
• Supabase — the database and file storage.
• Vercel — site hosting and the visit counter.
• Telegram — sign-in, notifications about your emotions and payments in Telegram Stars go through our bot. Telegram processes payments; we receive only the payment number, the amount and which pack was bought.
• Resend — sends the password-reset email to your address.

We process the photo ourselves, on our own server: the portrait is built here and the picture never leaves. Nobody else.

• The letter, the photos and the music — 90 days after publishing. Then a scheduled cleanup really deletes them, files included.
• Sign-in — 90 days; a password-reset link — one hour.
• The payment record lives longer: it is needed for accounting.
• A support email — while we handle it, and 90 days after it closes.

• To delete a letter early or wipe the account entirely — email supportlunamur@gmail.com and we'll do it.
• The letter's link is known only to the person you sent it to: the address can't be guessed and never reaches search engines.

Lunamur is not for anyone under 13.

If the policy changes, the date at the top changes with it.

A question, a complaint, a request to delete your data — supportlunamur@gmail.com.