01
Who we are
The Moon Letter is the data controller for the personal data described in this policy. You can reach us at hello@themoonletter.com.
This Privacy Policy explains how The Moon Letter ("we", "us", "our") collects, uses and protects information when you visit our website, buy our products, or interact with our content. We are an independent studio based in the Netherlands, and we design our services to collect as little personal data as possible.
02
Information we collect
Information you give us
If you email us, we receive your email address and the content of your message. If you buy one of our digital products, purchase details are handled by our store provider, Gumroad.
Information collected automatically
Our website and host may keep basic technical logs — such as IP address, browser type and pages requested — to keep the site working and secure. These logs are kept minimal and are not used for profiling.
What we do not collect
We do not sell your data, we do not run advertising trackers, and we do not ask for sensitive personal information.
03
How we use information
- To respond to your messages and provide support.
- To deliver the products you have purchased.
- To keep our website secure and reliable.
- To comply with our legal obligations.
Our legal bases under the GDPR are your consent, the performance of a contract, and our legitimate interest in running a small, secure studio.
04
Our use of social platform APIs
We publish daily content across our own channels using the official developer APIs of platforms such as Pinterest, Meta (Facebook & Instagram), TikTok and YouTube. We use these APIs solely to publish and manage our own content on our own accounts.
We do not access, collect, store or process personal data belonging to other users of these platforms. Any access tokens are stored securely and used only for automated publishing to our own accounts; they are never shared or sold.
We comply with each platform's developer policies and terms.
05
Cookies & analytics
We use only what is necessary for the site to function. We do not use advertising or cross-site tracking cookies. If we ever add privacy-friendly, aggregated analytics, we will update this policy and ask for consent where required.
06
Third-party services
- Gumroad — our store and payment provider.
- Our web host — serving this website.
- Social platforms — Pinterest, Meta, TikTok and YouTube, where we publish our content.
Each of these services has its own privacy policy.
07
Data retention
We keep personal data only as long as needed for the purposes described above, after which it is deleted or anonymised. Purchase records may be kept longer where we are legally required to do so.
08
Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection, and data portability. You may withdraw consent at any time, and you may lodge a complaint with your data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.
To exercise any of these rights, write to hello@themoonletter.com.
09
Data security
We use appropriate technical and organisational measures to protect information, including HTTPS and careful handling of credentials and access tokens. No method of transmission or storage is 100% secure, but we take this seriously and keep our practices simple and tight.
10
Children's privacy
Our content is intended for adults and is not directed at children under 16. We do not knowingly collect personal data from children.
11
Changes to this policy
We may update this Privacy Policy from time to time. When we do, the "Last updated" date at the top of this page will change.
12
Contact
Questions about privacy? Write to hello@themoonletter.com — we're glad to help.