Privacy Policy

What we collect

When you use MoonBase we collect:

• Email address (to sign you in)
• Display name (if you set one)
• The files and content you upload to publish
• IP address and browser/device details from each request, for security and analytics
• Aggregated visitor stats for the sites you publish — visitor counts, top pages, top countries

Why we collect it

We use your data for three things:

• To run the service: log you in, host your sites, show you your dashboard, deliver email
• To keep things secure: detect abuse, prevent fraud, investigate incidents
• To improve MoonBase: understand which features get used and which don't

Service providers we share data with

We use a small number of third parties to run MoonBase. We share only what's needed for them to do their part. We don't sell your data, and we don't share it for advertising.

• Cloudflare — DNS and CDN for your published sites
• Supabase — database where account data is stored (hosted in EU)
• SPD Hosting — physical server where your published sites live
• Sentry (planned) — error tracking, helps us spot bugs faster

Cookies

We use one essential cookie to keep you signed in (it stores a secure session token). We don't use tracking cookies, advertising cookies, or third-party analytics in the MoonBase dashboard.

Your rights

You have the right to:

• Access the data we hold about you (download via Account → Danger Zone)
• Correct anything that's wrong (edit your profile)
• Delete your account and the data tied to it
• Export your data in a portable format

Data retention

We keep your account data for as long as your account is active. After you delete your account, we keep a soft-deleted record for 30 days (so we can restore it if you change your mind), then permanently remove it. Backups may take a few additional weeks to fully purge.

Children

MoonBase is not for users under 16. Don't create an account if you're younger than that.

International data transfer

Your data may be processed by service providers based outside Israel — mainly in the EU and US. We pick providers that offer reasonable security and data-protection practices.

Security

We use industry-standard practices: encrypted connections, hashed passwords, two-factor authentication, encrypted secrets at rest. No system is 100% secure, but we treat your data carefully.

Changes

We may update this policy. Material changes will be announced by email or in the app before they take effect.

Contact

Questions, complaints, or requests about your data: [email protected]