Privacy Policy — Onyx Moon LLC

Effective date: 2026-07-30 Last updated: 2026-07-30

Onyx Moon LLC (“Onyx Moon,” “we,” “us,” or “our”) operates the onyxmoon.fun website and the software products, mobile applications, and services published under our name, including titles distributed through the Apple App Store, Google Play, and the web. This Privacy Policy explains what information we collect across all of those services, how we use it, and the choices you have.

Individual apps may also link to this policy from their in-app settings and store listings. Where a specific product handles data differently from the general practices described here, that product will disclose those differences in its own in-app privacy notice or store listing.

1. Who we are

• Legal entity: Onyx Moon LLC, a New York limited liability company
• Registered address: 41 State Street, Suite 112, Albany, NY 12207, USA
• Contact: support@onyxmoon.fun
• Data Protection Contact: privacy@onyxmoon.fun

2. Information we collect

2.1 Information you provide

• Account credentials and profile information you supply when you sign up or sign in (for example, email address and display name).
• Content and preferences you configure inside our products.
• Support correspondence you send to us.

2.2 Information collected automatically

• Usage and product telemetry: anonymized event data, session metadata, feature interactions, device model, operating system, app version, and coarse locale.
• Diagnostics: crash reports, non-fatal exceptions, and basic performance samples used to improve stability and quality.
• Advertising identifiers: collected only where a specific product includes advertising, and only if you consent to personalized ads through the platform’s ad SDK. You may opt out through your device settings (iOS: Limit Ad Tracking; Android: Reset advertising ID / Opt out of Ads Personalization).

2.3 Information we do NOT collect

• Precise location (GPS), unless a specific product explicitly requests it with your consent.
• Contacts, calendar, SMS, or call history.
• Photos, videos, or files outside an app’s own sandbox.
• Health, financial, or biometric data.

3. How we use information

• Provide, operate, secure, and maintain our products and website.
• Deliver features you request (such as syncing progress or account data across devices).
• Diagnose crashes and improve stability, performance, and quality.
• Display advertising in products where advertising is offered, subject to your consent.
• Comply with legal obligations.

We do not sell personal information. We do not use your data to train third-party machine-learning models.

4. Legal bases (GDPR / UK GDPR)

• Contract: to provide the products and services you requested.
• Legitimate interest: diagnostics, fraud prevention, security.
• Consent: personalized advertising and optional analytics.
• Legal obligation: tax, accounting, and responses to lawful requests.

5. Sharing and disclosure

We share data only with vendors and processors that help us operate our services, each bound by a Data Processing Agreement or equivalent contractual protections. Categories of processors we use include:

We do not transfer personal data to jurisdictions without an adequate protection framework. Where applicable, cross-border transfers rely on Standard Contractual Clauses or equivalent safeguards.

6. Data retention

• Usage and product telemetry: retained on a rolling window (typically 90 days) and then aggregated or anonymized.
• Account data: retained while your account is active and deleted within 30 days of an account deletion request.
• Diagnostics and crash logs: up to 180 days.
• Advertising identifiers: subject to your device settings and the policies of the applicable ad SDK.

7. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, VCDPA, and similar laws) you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (“right to be forgotten”)
• Port your data to another service
• Object to or restrict certain processing
• Withdraw consent at any time
• Lodge a complaint with your local supervisory authority

To exercise any of these rights, email privacy@onyxmoon.fun. We respond within 30 days.

Account deletion: you can request full deletion at https://onyxmoon.fun/delete-account or by emailing us. Deletion cascades across our systems and processors within 30 days.

8. Children’s privacy

Our products are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect data from children. If you believe a child has provided us data, email privacy@onyxmoon.fun and we will delete it.

9. Security

• All traffic is encrypted in transit with TLS 1.2 or higher.
• Secrets and credentials are stored in a managed secrets vault; no plaintext credentials in source control.
• User-scoped data is protected by row-level or equivalent access controls on our backends.
• Least-privilege service accounts are used for automation and CI/CD.
• Material data-breach notification is issued within 72 hours where required (for example under GDPR Article 33).

10. International users

By using our services you consent to processing in the United States. If you are in the EEA, UK, or Switzerland, transfers occur under Standard Contractual Clauses. If you are in California, see the CCPA disclosures above (§7); we do not sell or share personal information as defined by CPRA.

11. Changes to this policy

We will post material changes at https://onyxmoon.fun/privacy and update the “Last updated” date. Continued use of our services after changes constitutes acceptance.

12. Contact

• Privacy inquiries: privacy@onyxmoon.fun
• Support: support@onyxmoon.fun
• Postal: Onyx Moon LLC, 41 State Street, Suite 112, Albany, NY 12207, USA