Privacy Policy

When you use Luune, we collect the following information:

• Birth details — date, time, and place of birth, used solely to generate your natal chart and astrological readings.
• Account details — your name and email address, used for authentication, account support, and email delivery.
• Payment and subscription status — Stripe customer and subscription identifiers, purchase timestamps, and billing status. We do not store full card numbers.
• Generated content — daily briefings, chat messages, compatibility results, love reports, and journal notes you save.
• Support requests — if you contact us through the support form, the email, category, and message you submit, plus the page you were on and your browser's user-agent, used to respond to and triage your request.
• Usage and diagnostics data — product events, page performance, and error reports used to improve reliability.

We use your data to:

• Generate personalized astrological content based on your natal chart.
• Send daily briefing emails if you have enabled them in settings.
• Authenticate you via passwordless magic-link sign-in.
• Process purchases, subscriptions, cancellations, and failed-payment recovery.
• Improve Luune's features and performance.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your birth details, chart context, journal context, and questions may be sent to an AI language model to generate astrological readings. These requests are processed by our AI provider, OpenAI. We do not use your data to train Luune-owned AI models.

We use the following third-party services to operate Luune:

• OpenAI — AI language model for astrological readings. Your birth details, chart context, journal context, and questions may be sent to OpenAI's API.
• Resend — Email delivery for magic-link sign-in and daily briefings. Your email address is transmitted to Resend to send these messages.
• Stripe — Payment processing, subscription management, receipts, billing status, and failed-payment recovery.
• OpenStreetMap Nominatim — City search for birth location. When you type a city name in the birth details form, that query is sent to the public Nominatim geocoding API. No personal identifiers are included in these requests.
• Sentry — Error monitoring and performance diagnostics used to identify and fix production issues.
• Vercel — Hosting, analytics, speed insights, and deployment infrastructure.
• Google (Google Analytics) — If you accept analytics cookies in our cookie banner, we load Google Analytics (gtag.js) to measure site traffic and usage. Google may process data according to their policies; we configure the tag to load only after that consent.
• Meta Pixel — If configured and accepted through analytics consent, Meta Pixel may be loaded to measure marketing performance.
• Pinterest (Pinterest Tag) — Only if you accept analytics cookies in our cookie banner, we load the Pinterest Tag (from s.pinimg.com) to measure advertising conversions, such as creating an account or completing a purchase. Pinterest receives page-visit and conversion events tied to a Pinterest-managed cookie. If you are signed in when the tag loads, your email address is passed to Pinterest's script in hashed form (“enhanced match”) to attribute conversions; signed-out visitors send no email. The tag does not load if you decline or before you choose. See Pinterest's Privacy Policy.
• Telegram — When you submit our support form, your message is forwarded to our team in a private Telegram group via a Telegram bot so we can respond quickly. The forwarded message contains the details you provide (your email, the category, and what you typed) along with the page you were on and your browser's user-agent string. Telegram processes this message in order to deliver it to us. See Telegram's Privacy Policy.

We do not sell, rent, or share your personal data with any other third parties.

Your account data is retained while your account is active. If you delete your account from Settings, we immediately sign you out, cancel active subscriptions on a best-effort basis, and mark the account for deletion. Associated account data is scheduled for permanent deletion after a 30-day retention window. Expired authentication tokens and sessions are automatically purged on a regular schedule.

Luune uses two types of browser storage:

• Session cookie (lune_session) — strictly necessary for authentication. Set after you sign in and expires after 30 days of inactivity.
• Signup prefill cookie (lune_prefill) — a temporary cookie that saves signup details during the magic-link flow.
• Local and session storage — used by the quiz funnel and cookie banner to remember progress, referral information, and consent choices.

If you accept analytics in the cookie banner, we also load Vercel Analytics and, when configured, Google Analytics, Meta Pixel, and the Pinterest Tag to understand how Luune is used and to measure advertising conversions. These set their own cookies (for example, Pinterest's _pinterest_ct / _epik cookies). Those scripts are not loaded if you decline or before you choose, and you can withdraw consent at any time by clearing your choice in the cookie banner.

You have the right to:

• Access — download a full copy of your data from Settings → Export my data.
• Correct — update your name, date of birth, and birth details in Settings at any time.
• Delete — request deletion of your account and associated data from Settings → Delete account.
• Withdraw consent — opt out of email communications via the unsubscribe link in any email or by toggling off Daily Briefing in Settings.

For any other privacy requests, email us at support@withluune.space.

We use industry-standard encryption and access controls to protect your data. Authentication is handled via passwordless magic links — we never store passwords.

For any privacy-related questions or requests, please email us at support@withluune.space.