Privacy notice

Who runs this site

lunar-protocol.com is the official website for the game Lunar Protocol and is run by the team making it. For any question or request about your data, email [email protected].

Delivering the site

Pages reach you through Cloudflare, a network provider that sits between your browser and our server. To do that, Cloudflare processes your IP address, your browser type and the addresses of the pages and files you request. It uses them to route traffic and to block abuse.

Our own server keeps an access log of the time, the file requested, the referring page and the browser type. The log does not include IP addresses.

The game’s installer, and the small file the page reads to show the current version, come from downloads.lunar-protocol.com. Cloudflare serves them from its R2 storage service and handles the same data as for pages. They do not pass through our own server.

The supporter frames page asks accounts.lunar-protocol.com, the game’s account service, for the frames’ current prices. That request reaches it through Cloudflare like a page, carries no cookie and no account details, and the account service keeps no record of it.

To decide whether it must ask you about analytics, the page asks our server which country Cloudflare detected for your connection. The answer is a two-letter country code. It is used once in your browser and is not stored or logged.

Analytics

We use Google Analytics 4 to count visits and to see which trailers, ships and screenshots people look at. It runs only on lunar-protocol.com, and when it starts depends on where you are:

• In the European Economic Area, the United Kingdom and Switzerland, or if your country cannot be determined, the site asks first. Nothing is loaded from Google unless you choose Accept. If you choose Decline, or leave the question unanswered, no analytics runs.
• Everywhere else, analytics starts when the page loads.
• Wherever you are, Cookie settings in the footer of every page lets you change your choice. Choosing Decline there stops analytics and deletes its cookies.

When analytics runs, Google receives:

• the pages you view and what you do on them: scrolling, clicks on links to other sites, opening a video file, downloading the game, playing a trailer and how far you watch, and the ships and screenshots you open;
• the site that referred you, your browser, device type, screen size and language;
• an approximate location worked out from your IP address. Google Analytics 4 does not store the address itself;
• a random identifier kept in cookies, which lets visits from the same browser be counted together.

We have turned off Google’s advertising features for this site, so this data is not used to personalise ads. We never combine it with a name, email address or account, because the site does not collect any.

Google Analytics deletes visit-level records after 2 months. What remains are totals, such as the number of visits per day, that do not relate to any browser.

What is stored in your browser

• _ga and _ga_S3ZT4QQ3C8: cookies set by Google Analytics once it runs. They hold the random identifier and expire after 13 months.
• lp-analytics-consent: an entry in your browser’s local storage that records whether you chose Accept or Decline, so the site does not ask on every visit. After 6 months it is ignored and the site asks again.

The site sets no other cookies. If Cloudflare suspects automated traffic, it may set a security cookie of its own while it checks the connection.

Legal basis

Delivering the site and protecting it from abuse rests on our legitimate interest in running it. For analytics, where the site asks first, the legal basis is your consent. Elsewhere it is our legitimate interest in knowing how the site is used, and Cookie settings is how you object.

Who receives your data

• Cloudflare, Inc. delivers and protects the site. See Cloudflare’s privacy policy.
• Google Ireland Limited provides Google Analytics. See how Google uses data from sites that use its services. Google also offers a browser add-on that blocks Google Analytics on every site.

Both companies may process data in the United States. Both are certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing adequate protection. We do not sell data or share it with anyone else.

Links to Discord and other services take you to sites that apply their own privacy policies. Supporter frames are bought from the game, not on this site: the checkout page is Stripe’s, and Stripe’s privacy policy applies to it.

Your rights

Data protection law gives you the right to ask for a copy of the data held about you, to have it corrected or deleted, to restrict or object to its use, and to withdraw consent at any time. Cookie settings withdraws consent immediately.

The analytics data is linked only to the random identifier in your browser’s cookies, not to your name. To have it found or deleted, send us that identifier, which is the value of the _ga cookie. If you delete the cookies yourself, past visits can no longer be connected to your browser.

To make a request, email [email protected]. You can also complain to a data protection authority, for example the CNIL in France or the authority in your own country.

Changes to this notice

We will update this page whenever the site changes what it collects. The date under the title shows when it last changed.