1.Scope & Controller
The data controller responsible for the information described in this policy is Luna Technologies, [To confirm: legal entity name, registration number and address]. This policy applies to data collected through the Luna Sniper website, the customer dashboard, and the backend API used by the desktop application.
2.Information We Collect
We collect the following categories of information when you use the Service:
- Account information: the email address you register with, and your password. Your password is never stored in plain text — it is hashed with a salted algorithm (Argon2 or bcrypt) before being saved, so we cannot see or recover your actual password.
- License & payment records: your plan (Monthly/Yearly), license key, license status, and payment status/amount/currency for cryptocurrency payments processed through NowPayments. We do not collect or store your wallet's private keys or seed phrases — payment is handled entirely by NowPayments' hosted checkout.
- Technical & log data: standard request metadata incidental to running a web service (e.g. IP address and timestamps in server logs), used for security and troubleshooting.
What we do not collect: your Steam account credentials are never sent to or stored on the Luna Sniper website or backend. If the downloadable Luna Sniper application stores your Steam session/login locally on your own device to perform automated market actions, that storage happens on your machine, not on our servers.
3.How We Use Your Information
We use the information described above to: create and manage your account; issue, validate and revoke license keys; process and reconcile payments; send transactional emails (account confirmation, password reset, purchase confirmation); respond to support requests; detect and prevent abuse or fraud; and maintain the security and reliability of the Service. We do not sell your personal information, and we do not use it for third-party advertising.
4.Third-Party Processors
We share the minimum data necessary with the following processors to operate the Service:
- NowPayments — receives your email and plan/amount to generate a crypto payment invoice, and returns payment status to us.
- Keygen.sh — receives an identifier for your account to issue and manage license keys and device activations.
- Resend — receives your email address to deliver transactional emails on our behalf.
- Render — hosts our backend API and database infrastructure.
Each of these providers processes data under their own privacy policy and security practices, in addition to any data-processing terms we have with them.
5.Data Retention
We retain your account, license and payment records for as long as your account exists, so that you can view your license and payment history in the dashboard. If you delete your account (see Section 6), we revoke your active licenses via Keygen and permanently delete your account, license and payment records from our database. Server request logs are retained for a limited operational period for security and debugging purposes and are not kept indefinitely.
6.Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly:
- Access & correction: your account email, license keys and payment history are visible in your dashboard at all times.
- Password reset: available from the dashboard's "Forgot password?" flow.
- Deletion: the "Delete Account" button in your dashboard permanently and irreversibly deletes your license, payment and account records after revoking your active licenses.
For any request you cannot complete yourself through the dashboard, contact us using the details in Section 12.
7.Cookies & Local Storage
The Service does not use tracking cookies or third-party advertising cookies. The dashboard and checkout pages use your browser's localStorage to keep you signed in and to remember light preferences, specifically:
luna_token— your session authentication token, used to authorize API requests after you log in.luna_api_base— an optional override of the backend API address, only set if you (or a support agent) explicitly configure one via a URL parameter.
This data stays in your browser and is not accessible to other websites. You can clear it at any time via your browser settings, which will simply log you out.
8.Security Measures
We apply reasonable technical measures to protect your data, including salted password hashing (Argon2/bcrypt) so plain-text passwords are never stored, and transport encryption (HTTPS) for data sent between your browser and our backend. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we work to keep the Service and your data protected and to respond quickly if an issue is identified.
9.International Data Transfers
Our infrastructure and service providers may process data in countries other than your own. Where required by applicable law, we rely on appropriate safeguards for such transfers.
10.Children's Privacy
The Service is not directed at children and is not intended for use by anyone under 18, consistent with the eligibility requirement in our Terms of Service. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11.Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. We will update the "Last updated" date above when we do, and for material changes we will make reasonable efforts to notify active account holders by email.
12.Contact
Questions about this Privacy Policy or requests regarding your data can be sent to [To confirm: privacy contact email].