Privacy

Short version: I do not want your data and I have nowhere to put it.

Your date of birth

When you enter a date, the moons are worked out by JavaScript running on your own device. The date is not sent to my server and it is not written down anywhere. If you reload the page it is gone.

The one exception is buying a keepsake. To draw your file the server has to know the date, the title, the dedication and any milestones you added, so those travel to Stripe as part of the order and are read back when you download. I keep no separate copy and there is no customer database.

What I count

I do keep a small set of counters, because otherwise I have no idea whether this thing works. Here is the complete list of what exists.

When one of these things happens, your browser sends me the name of the event and nothing else:

• page_view — the page was opened
• portrait_generated — a valid date produced a set of moons
• image_saved — the free card was saved
• link_copied — the share link was copied
• customization_started — a title, dedication, milestone or style was changed
• checkout_started — the buy button was pressed
• poster_downloaded — a purchased file was downloaded
• checkout_completed — recorded by my server when Stripe confirms a payment, not by your browser

I add one to a counter for that event name, for today's date. That is the entire stored record. It looks like this:

d:2026-07-26:portrait_generated → 42

What is deliberately not collected

• No cookies, and nothing written to your browser's storage.
• No identifier of any kind — no visitor ID, no session ID, no fingerprint. Two events cannot be linked to the same person, not even by me.
• Not your birth date, name, dedication or milestones.
• No IP address, user agent, screen size or referrer stored against any event.
• No advertising pixels, no third-party analytics, no session recording, no cross-site tracking.

The trade-off is honest: because there are no identifiers, I can see that 100 people opened the page and 40 made a portrait, but never which 40. That is less useful to me and considerably safer for you, and it is the right way round.

Cloudflare, which serves the site, also counts requests at the network level. Those counts are aggregate and I cannot use them to identify you.

Payment

Payments are handled entirely by Stripe. Your card details never touch my server — I never see them. Stripe collects your email address to send the receipt and holds the order under its own privacy policy.

Email

If you write to me, I keep the email so I can reply. I do not add anyone to a mailing list, because there isn't one.

Your rights

Since I hold nothing about you, there is generally nothing to request or delete. For anything relating to a purchase, email hello@moonportrait.com and I will deal with it, including asking Stripe to erase the order.

Who is responsible for this

The data controller is Seedio, a one-person business registered in Poland, NIP 5213952537, REGON 520978364, reachable at hello@moonportrait.com. Stripe processes payments and holds the order; nothing else is stored anywhere.

← Back to Moon Portrait