Privacy policy

Lunaris is a software practice based in Chișinău, Moldova, working remotely with clients across Europe. We are the data controller for anything described on this page.

For anything in this policy, including a request to delete your data, write to contact@lunaris.build and a person will answer.

The enquiry form is the only place this site asks you for anything. When you submit it we receive your name, work email address, company if you gave one, what you wrote about the project, the budget range and referral source if you picked them, and whether you asked for an NDA.

Our hosting provider also records standard server request data — IP address, user agent, the page requested, the time — in order to serve pages and defend against abuse. That is ordinary web server logging and we do not build anything on top of it.

This site runs no analytics, no advertising pixels, no session recording and no third-party tracking scripts of any kind. We do not know who you are or which pages you read.

It sets no cookies. The one piece of storage it uses is a single flag kept in your browser’s session storage so the opening animation plays once per tab instead of on every page; it is cleared when you close the tab and it is never sent to us or to anyone else.

If that ever changes — if we add privacy-respecting analytics — this page changes before it is switched on.

One thing: replying to your enquiry, and if it goes further, preparing a proposal and doing the work. Our lawful basis is legitimate interest — you contacted us and expect an answer.

It is never sold, never shared for marketing, and never added to a mailing list. There is no mailing list.

The site is hosted on Vercel, which processes server request data in order to serve pages. Enquiries are delivered to our inbox by Resend, and the inbox itself is Google’s.

All three act as processors on our instructions. No other third-party service receives your data.

Enquiries live in our email inbox. We keep them while a conversation is active and for as long as we reasonably need the record of a project afterwards. An enquiry that doesn’t lead anywhere is deleted within twelve months.

Server logs are kept by our hosting provider for their own short retention period; we don’t take a copy or keep one of our own.

You can ask us to delete your enquiry at any point and we will do it.

If you are in the EU or the UK, the GDPR gives you the right to see the personal data we hold about you, to correct it, to have it deleted, to restrict how it is used, to object to that use, and to receive it in a portable form.

Email us to exercise any of them. We answer within thirty days, and in practice much sooner. If you think we have handled your data badly, you can complain to your national supervisory authority.

If this policy changes, the date at the top changes with it and the new version is posted on this page. We don’t quietly revise it.