Privacy Policy

This product policy draft explains how NYTHLUNE handles account, profile, safety, messaging, verification and creator data. It should receive qualified legal review before commercial launch.

What we collect

Account data can include display name, email, date of birth, password hash, age environment, verification state, profile information, social interactions, posts, media, messages, reports, device/session metadata and support communications.

Age-separated environments

Members aged 16–17 use a separate teen environment. Adult dating, creator and adult-rated areas are not available to teen accounts. Date of birth alone does not unlock restricted adult content.

Messaging & Owner safety access

Private-message image and video attachments, their sender/recipient metadata, and limited surrounding message context can be accessed by authenticated Owner Control for moderation, safety, abuse prevention, platform operations and legal compliance. Owner media reveals and moderation actions are audit-logged. NYTHLUNE does not represent these attachments as end-to-end encrypted from the platform operator.

Onboarding, Community Passport & reputation

NYTHLUNE stores onboarding choices such as selected interests, language and notification preset. Community Passport can display member-controlled platform milestones and community-issued achievements. Orbit Reputation is derived from participation signals such as account history, connections, community participation, events and referrals; it is presented as a contribution score rather than a safety, creditworthiness or character score. Passport visibility can be limited by the member.

Launch list & referral attribution

If you join the public launch list, NYTHLUNE stores the email address and optional name, role interest and referral code you submit so launch invitations and outreach can be managed. Referral attribution can connect a new registration to the member invite code used at signup.

Operational performance telemetry

NYTHLUNE can collect route-level browser performance timings such as load time, TTFB, LCP, layout shift, long-task count and coarse connection type to measure reliability and diagnose regressions. This operational telemetry does not contain message bodies, media URLs, passwords or raw IP addresses and is retained on a bounded basis.

Verification evidence

Age-verification evidence is highly sensitive, kept private and subject to retention/deletion controls unless a lawful preservation requirement applies.

Security

Passwords are salted hashes. NYTHLUNE uses secure sessions, session revocation, login-abuse controls, Owner MFA, audit logs and security-event records.

Retention & deletion

Members can request account deletion from Security Center. Safety, financial, fraud-prevention or legal records can require justified retention. Private verification evidence can be deleted separately after review.