Privacy Policy

This policy applies to account holders, site owners, collaborators, visitors who interact with Luna Sites services, and people whose information is submitted through features such as forms, collaborator invitations, domain registration, billing, or support.

Customer websites may have their own privacy policies. Site owners are responsible for the content they publish and for telling their own site visitors how they collect and use information.

• Create, authenticate, secure, and manage user accounts.
• Create, import, edit, host, publish, cache, and serve websites.
• Provide LunaCMS editing, content management, media handling, forms, previews, and deployment workflows.
• Process subscriptions, custom domain connections, invoices, payments, refunds, and related customer records.
• Provide site analytics, product analytics, uptime, diagnostics, abuse prevention, and security monitoring.
• Send transactional emails such as login links, verification emails, collaborator invitations, import notifications, billing notices, and service updates.
• Improve, debug, and develop Luna Sites, LunaCMS, templates, editor features, and infrastructure.
• Comply with legal, tax, accounting, fraud prevention, security, and domain registration obligations.

Luna Sites uses authentication sessions, security cookies, browser storage, and similar technologies to keep users signed in, complete passwordless email login flows, remember account state, protect the service, and operate the editor. Customer sites may also use analytics or form features configured through LunaCMS.

We use trusted service providers to operate Luna Sites, LunaCMS, hosting, billing, domain registration, analytics, email, storage, databases, and infrastructure. These providers process information only as needed to provide their services to us.

• Firebase and Google services for authentication, identity, and related account infrastructure.
• Stripe for payments, checkout, subscriptions, billing, and payment-related records.
• Domain registrars and DNS providers for domain availability, DNS, and custom domain connection handling.
• Render, Fly.io, PostgreSQL providers, CDN/cache providers, and hosting infrastructure used to run the platform and customer sites.
• Umami or similar analytics infrastructure used for privacy-conscious website and product analytics.
• Email delivery providers used to send authentication, collaboration, notification, and support emails.

Content that you publish through Luna Sites or LunaCMS may become public, including pages, images, files, metadata, site names, domains, and other material you choose to publish. Do not publish personal data unless you have the right to do so.

We use administrative, technical, and organizational safeguards designed to protect personal data. No online service can guarantee absolute security. We keep information for as long as needed to provide the services, maintain records, resolve disputes, prevent abuse, comply with legal obligations, and support backups and operational recovery.

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal data. You can manage some information from your account or site settings. For other requests, contact us using the details below.

Luna Sites, LunaCMS, and our service providers may process and store information in countries other than where you live. When required, we rely on appropriate safeguards for international data transfers.

We may update this Privacy Policy when the service, legal requirements, or our practices change. The updated version will be posted at this URL with a new last updated date.

For privacy requests or questions, contact Luna Sites support at contact@lunasites.io.