Privacy Policy

What we store

• Display name — from the account you choose to link (Google or X)
• Token balance and license status
• Machines your license is activated on (machine name + OS version, no personal files)
• Sharing-network participation — your opt-in state, your accepted-job history, your reputation score

What we never store

• Email address — lives only with Google or X, never copied to us
• Passwords — password sign-in is disabled
• Payment card data — handled entirely by Lemon Squeezy (PCI-DSS Level 1)
• Your projects, exports, or media files — they live on your machine, not ours

How we protect it

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Auth is handled entirely by Google or X — we receive only a one-time OAuth token, never your password. The sharing network runs work units in a hardware-isolated sandbox that has no network access back to the orchestrator during execution.

Sharing network privacy

When you opt-in to sharing, your machine receives opaque work units — a single color frame, a short AI inference, an encoding slice. Each work unit is a self-contained opaque payload. The orchestrator never sees your media, your projects, or any other file on your system. Your machine never sees other users' media either.

Where data lives

Account data is hosted on Cloudflare (edge network) and Google Cloud (us-central1). EU users can request transfer to europe-west1 from Settings → Privacy. Project files, media, and exports never leave your machine regardless of region.

Your rights

The dashboard has a Download my data action that returns a JSON archive of every field tied to your account, and a Delete account action that schedules a hard delete within 30 days. Email requests to privacy@mooned.dev are honored the same way.

Contact

Privacy questions: privacy@mooned.dev