Privacy Policy

1. What this covers

This policy covers our marketing website (moonies.app) and the moonies application (dash.moonies.app). HonestDev is the controller of the personal data described here, and our contact details are listed above.

2. What we collect

When you contact us or join our waitlist or newsletter, we collect the details you give us, such as your name, email address, the name of your venue and your message.

When you use the moonies application, we collect the account details you provide (such as your email address and organisation) and the content you create in the product.

When you make a payment, our payment provider collects the payment details needed to process it. We receive a confirmation and limited transaction information, not your full card number.

We use self-hosted Umami on Hetzner servers in the EU to understand public page visits, campaign sources and completed website actions. We send reviewed page paths and campaign labels, the referring website, and event names, without form contents, account identifiers or private dashboard URLs. Umami processes the IP address and browser information to estimate location and generate a pseudonymous identifier that rotates daily; raw IP addresses are not stored in its analytics database. This website integration uses no analytics cookies or browser storage, and respects Do Not Track and Global Privacy Control. We do not use it for advertising or session recordings. Existing cookieless Plausible statistics remain during the migration.

3. Why we use it and on what basis

We use your data to provide and improve moonies, to answer your questions, to send you the updates you asked for, to take payment, and to meet our legal obligations. Depending on the case, we rely on performing our contract with you, your consent (for example for the newsletter), or our legitimate interest in running and improving the service.

4. Who we share it with

We use a small number of trusted providers to run moonies, and share only what each one needs: Mollie for payment processing, Brevo for sending email and managing newsletter sign-ups, and our hosting provider (Hetzner, in the EU, via Coolify) to run the application and database. We also use Google for optional sign-in and for serving the fonts on our website.

We do not sell your personal data. We only share data with others when the law requires it or to protect our rights.

5. Where your data is stored

We host moonies on servers in the European Union. Where a provider processes data outside the EU, we rely on the safeguards required by data-protection law.

6. How long we keep it

We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires (for example, tax law for invoices). When we no longer need it, we delete or anonymise it.

7. Cookies

We keep cookies to a minimum. Our website uses a cookieless analytics tool, so it does not set tracking cookies. We use a small functional cookie to remember your language choice, and the moonies application uses cookies that are necessary to keep you signed in.

8. Your rights

Under the GDPR you can ask us to access, correct, delete or export your personal data, and you can object to or restrict certain uses. Where we rely on consent, you can withdraw it at any time. To exercise a right, contact us using the details above.

If you think we have not handled your data properly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections and access controls. No service can be completely secure, but we work to keep your data safe and to act quickly if something goes wrong.

10. Changes to this policy

We may update this policy as moonies develops or the law changes. We will post the new version here and, if a change is significant, let you know by email or in the app.