Legal
Privacy Policy
Last updated: February 27, 2026
1. Overview
MoonStore ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use the MoonStore platform ("Service"). By using the Service, you agree to the collection and use of information as described in this policy.
2. Information We Collect
We collect the following categories of information:
Account information
Username, email address, and password (stored as a secure hash). If you sign in via Google or GitHub OAuth, we receive your email address and public profile information from those providers.
Developer KYC data
Developers who enroll in the payout program provide identity verification information (name, address, and other KYC data required by Stripe). This data is processed and stored in accordance with Stripe's identity verification requirements.
Transaction data
Records of purchases, subscriptions, entitlements, and payouts associated with your account. Payment card details are never stored by MoonStore — they are processed directly by Stripe.
Usage data
Server logs, API request metadata, IP addresses, and session information collected automatically when you interact with the Service.
3. How We Use Your Information
We use the information we collect to:
- Operate, maintain, and improve the Service.
- Process transactions and facilitate payouts to Developers.
- Authenticate your identity and protect account security.
- Fulfill legal and regulatory obligations, including anti-fraud and KYC requirements.
- Send transactional communications (e.g., receipt emails, security alerts).
- Respond to support requests and inquiries.
We do not sell your personal data to third parties, and we do not use your data to serve third-party advertising.
4. Third-Party Services
MoonStore uses the following third-party services that may process your data:
- Stripe — Payment processing, Stripe Connect for developer payouts, and identity verification. Data shared with Stripe is governed by Stripe's Privacy Policy.
- Google OAuth — If you choose to sign in with Google, we receive your email and public profile. Governed by Google's Privacy Policy.
- GitHub OAuth — If you choose to sign in with GitHub, we receive your email and public profile. Governed by GitHub's Privacy Statement.
5. Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. Transaction records may be retained longer where required by applicable financial regulations. If you request account deletion, we will delete or anonymize your personal data within a reasonable time frame, except where retention is required by law.
6. Security
We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Passwords are stored using industry-standard hashing. API access is authenticated with signed JWT tokens. Despite these measures, no system is completely secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your personal data.
- Object to or restrict certain processing of your data.
- Data portability where technically feasible.
To exercise these rights, contact us through the support channels available in the MoonStore console.
8. Cookies and Local Storage
MoonStore uses browser sessions and local storage to maintain your login state and theme preference. We do not use third-party tracking cookies or analytics cookies. No data stored locally is shared with external services.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
11. Contact
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us through the support channels available in the MoonStore console.