Privacy Policy

Luna is a fantasy community built on Discord, consisting of Discord bots (Luna Butler, Luna Jester, Luna Sage, Luna Oracle), a website (lunarian.app), and related services. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using any Luna service, you agree to this policy. If you do not agree, please stop using our services and request data deletion.

We collect only the minimum data necessary to provide our services: - Discord account information: user ID, username, display name, roles (provided by Discord when you interact with our bots or log into the website) - In-game data: card collections, currency balances (Lunari), game statistics, level/XP progress, badge ownership, inventory items - Transaction records: purchases, trades, daily rewards, game winnings - Luna Sage AI interactions: messages sent in designated live chat channels where Sage is active, and messages sent directly to Sage via prefix commands - Mastermind-set user facts: server administrators may store notes about users for personalization purposes - Website session data: cookies for authentication and session management - Payment information: processed securely through Stripe; card details are never stored on our servers

Your data is used exclusively to provide Luna services: - Discord user ID and roles: to identify you across our bots and website, enforce permissions, and personalize interactions - In-game data: to maintain your progress, collections, and economy balance - Transaction records: to provide transaction history and prevent abuse - AI interactions: to generate contextual responses from Luna Sage (see Section 5) - Cookies: to maintain your website login session

We use third-party services to operate Luna: - Discord: our platform runs on Discord's infrastructure. Discord's own privacy policy applies to your use of Discord. - AI services: Luna Sage uses third-party AI APIs to generate responses. Message content from designated channels may be sent to these services for processing. We do not send your Discord user ID to any AI provider. - Stripe: processes payments securely. We never store your payment card details. - We use industry-standard cloud infrastructure for hosting, databases, and content delivery. All data is encrypted in transit and at rest. We do not sell your data to any third party. We do not use your data for advertising.

Luna Sage is an AI assistant that operates in designated Discord channels. When Sage is active in a channel: - Messages in that channel are temporarily held in memory (last 50 messages) to provide conversation context. This buffer is not permanently stored and resets when the bot restarts. - When Sage responds (via prefix command or auto-join), recent messages are sent to a third-party AI service to generate a response. User IDs are not included in data sent to AI providers. - Mastermind-set user facts: server administrators (Masterminds) may store facts about users that Sage references in conversation. These facts are stored in our database until a Mastermind removes them or you request deletion. - Activity logs: Sage logs when it reacts to or joins conversations (trigger type, channel, brief response excerpt). These logs are automatically deleted after 30 days. You can view what data Sage has about you by typing !sage mydata in any channel. You can request deletion of all your Sage data by typing !sage forget.

- In-game data (cards, currency, levels): retained as long as your account is active in the Luna server - Transaction records: retained indefinitely for audit purposes - Sage activity logs: automatically deleted after 30 days - Sage conversation buffer: in-memory only, not permanently stored - Sage user facts: retained until removed by a Mastermind or by your request - Website session cookies: expire when you log out or after 30 days of inactivity

You have the right to: - Access: view what data we store about you (use !sage mydata for Sage data, or contact us for other data) - Deletion: request deletion of your data at any time (use !sage forget for Sage data, or contact us through our Discord server for complete account deletion) - Correction: request correction of inaccurate data stored about you - Portability: request a copy of your data in a readable format To exercise these rights, contact us through the Luna Discord server or via the contact form on lunarian.app. We will respond to requests within 30 days.

We take reasonable measures to protect your data: - Database connections are encrypted (TLS/SSL) - Admin dashboard access is restricted to authorized Masterminds with CSRF protection and rate limiting - Bot tokens and API keys are stored as environment variables, never in code - All mutation endpoints require authentication and are audit-logged No system is 100% secure. If you discover a vulnerability, please report it through our Discord server.

Luna services are available to users who meet Discord's minimum age requirement (13 years or the minimum age in your country). We do not knowingly collect data from users below this age. If you believe a child under the minimum age is using our services, please contact us.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of Luna services after changes constitutes acceptance of the updated policy.

For privacy-related questions, data requests, or concerns: - Discord server: Luna (primary contact method) - Website: lunarian.app/contact We aim to respond to all inquiries within 30 days.