Privacy Policy - Lunara

Last Updated: March 2026

1. Data Controller

This Service is operated by Lunara Spa ("Lunara", "we", "our", or "us"). Lunara Spa is the data controller responsible for processing your personal data.

2. Information We Collect

We collect only the data necessary to provide and secure the Service.

2.1 Account Data

• Email address
• User ID (UID)

2.2 Service Data

• Preferences (including selected options within the app)
• Game progress and session data
• Custom content created by the user

2.3 Payment Data

• Purchase records and subscription status

Payments are processed by third-party providers. We do not store full payment card details.

2.4 Technical Data

• Device type and operating system
• App performance and crash data
• Basic log data (IP address, timestamps)

3. How We Use Your Data

• Provide and operate the Service
• Manage your account and purchases
• Save your preferences and progress
• Provide customer support
• Ensure security and prevent abuse

We do not sell personal data and we do not profile users for advertising purposes.

4. Legal Basis for Processing (GDPR)

• Contractual necessity: to provide the Service you request
• Consent: for optional processing (for example, communications)
• Legitimate interests: to secure and improve the Service

5. Third-Party Service Providers

We use trusted providers that process data on our behalf under contractual safeguards, including:

• Firebase (Google LLC): authentication, database, hosting-related services
• Hostinger: web hosting infrastructure
• Payment providers (such as PayPal, Wise, or app store billing systems)

6. International Data Transfers

Your data may be processed outside your country, including the United States and other jurisdictions. Where required, we apply appropriate safeguards, including Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms.

7. Data Retention

We retain data only for as long as needed for the purposes described in this policy:

• While your account is active
• To comply with legal obligations
• To resolve disputes and enforce agreements

When you delete your account, we delete or anonymize your data unless legal retention is required.

8. Your Rights (GDPR)

You may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time (where consent is the legal basis)

To exercise these rights, contact privacy@lunaraplay.com. We respond within 30 days.

9. Data Security

We implement technical and organizational security measures appropriate to the risk. No system is fully secure, but we continuously work to protect your data.

10. Children's Privacy

The Service is intended for adults (18+). We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes may be notified via the app, website, or email, and the "Last Updated" date will be revised.

12. Contact