Privacy Policy

1. Introduction

Lunaris CDN ("we", "us", "our") operates the website lunaris.win and the cdn.lunaris.win content delivery service. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect:

• Name and username
• Email address
• Password (stored as a secure hash, never in plain text)
• OAuth profile information (if you sign in with GitHub or Google), including your profile picture and email

Usage Data

When you use our services, we automatically collect:

• IP address (hashed for download logs, not stored in plain text)
• User agent string
• Referrer URL
• File download timestamps

Uploaded Content

Files you upload are stored on Cloudflare R2 object storage. We store file metadata including file names, sizes, SHA256 checksums, and MIME types. We do not inspect, analyze, or scan the content of your uploaded files.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Lunaris CDN service
• Authenticate your identity and manage your account
• Send email verification and password reset emails
• Display download statistics for your projects
• Enforce storage quotas and rate limits
• Prevent abuse and maintain service integrity

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not serve advertisements. We do not use your data for AI training.

4. Third-Party Services

We use the following third-party services to operate Lunaris CDN:

• Cloudflare — hosting, CDN, DNS, D1 database, and R2 object storage. Subject to Cloudflare's Privacy Policy.
• Resend — transactional emails (verification, password reset). Subject to Resend's Privacy Policy.
• GitHub / Google — OAuth authentication (only if you choose to sign in with these providers). Subject to their respective privacy policies.

5. Data Storage and Security

Your data is stored on Cloudflare's global infrastructure. We implement security measures including:

• HTTPS/TLS encryption for all data in transit
• Secure password hashing (scrypt)
• HTTP security headers (HSTS, CSP, X-Frame-Options)
• API key hashing (keys are not stored in plain text)
• IP address hashing in download logs

6. Data Retention

• Account data — retained until you delete your account
• Uploaded files — retained until you delete them or your account
• Download logs — retained for analytics purposes; IP addresses are hashed and cannot be reversed
• Session data — automatically expires and is cleaned up

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Update or correct your account information
• Delete your uploaded files at any time
• Delete your account and all associated data
• Export your data

To exercise any of these rights, contact us at privacy@lunaris.win.

8. Cookies

We use session cookies to keep you signed in. These are essential for the service to function and cannot be opted out of while using an account. We do not use tracking cookies, analytics cookies, or advertising cookies.

9. Children's Privacy

Lunaris CDN is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, contact us at privacy@lunaris.win.