Privacy

Who we are

This site is run by Brandon Chaney, trading as LunithLabs, at 62 Gates St, Lowell, MA 01851, United States. We decide what personal data the site collects and why, which makes us its controller.

For anything on this page, write to support@lunithlabs.com.

What we collect when you buy

Your email address, your name if you give it, the billing details the checkout asks for, what you bought, what you paid and when. We use them to deliver the files, send the order email, answer questions about the order, put right anything that does not work, and keep the accounting records the law requires.

You type your card details into Stripe's checkout page, and Stripe processes the payment. We never see or store your card number. Stripe shows us the card's brand and last four digits, which is how we find an order when you ask about it.

There are no accounts on this site and nothing to sign in to. Your order is a record in our own order book: its reference, the product, what you paid, the email address you gave at checkout, the exact wording you agreed to, and when each file was downloaded. The link to your order page carries a private key for that record; each download is checked against the record at the moment you ask for the file. If you lose the link, the find-my-order page sends it to the address on the order, and nowhere else.

What we collect when you write to us

Your email address and whatever you put in the message. We use it to answer you and, if the message is about an order, to find that order.

What happens when you visit

The pages and the order service run on Cloudflare. Like any web host, Cloudflare handles your IP address and basic browser details to deliver each page and to protect the site from abuse. We do not use that information to build a profile of you.

Cookies and tracking

This site sets no cookies of its own.

If you pick the light or dark theme with the switch at the foot of a page, your browser keeps that one word in its own storage on your device, so the next page opens the same way. It is never sent to us, and clearing your browser's site data removes it.

Stripe's checkout page is on Stripe's own site. Stripe uses cookies there that it needs to take the payment and prevent fraud, under its own cookie policy.

There are no advertising pixels on this site and no analytics run on it. If that changes, this page will change first: it will name the provider and what it collects before anything is switched on, and ask for your consent wherever the law requires it.

We do not use the order email to track whether you open it or which links you click.

Who else handles your data

Stripe takes the payment, keeps its own record of it, and checks payments for fraud. Stripe also uses some of this data for its own purposes, such as fraud prevention and meeting its own legal obligations, under its own privacy policy.

Cloudflare hosts the site, runs the small service that keeps the order book and delivers your files, holds that order book in its database service, and stores the files you download.

Resend sends the order email, the find-my-order email and the sign-up confirmation, each to the address you gave. It does not track opens or clicks for us.

We do not sell your data, rent it or give it to advertisers. We would disclose it if the law required us to, for example to a tax authority.

Where it is processed

These providers are based in the United States and may process your data there and in other countries. Each sets out in its own terms the safeguards it relies on for international transfers, such as standard contractual clauses.

How long we keep it

Order records are kept for as long as the accounting and tax rules that apply to Brandon Chaney require, and then deleted. Stripe keeps its own records for as long as its own obligations require.

Support emails are kept for as long as the order they are about, or, if they are not about an order, for as long as the conversation is useful.

The order book keeps, for each order, when each file was downloaded, so we can help when a download fails. The order service also writes brief technical logs, for example when a payment is reversed or an email fails to send; they name no email address or key. Cloudflare holds the logs for a short period, and they are used for nothing else.

Why we are allowed to use it

If you are in the UK or the European Union, the law asks us to name a legal basis. Delivering your order and answering you about it is performing our contract with you. Keeping order records is a legal obligation. Protecting the site and checking payments for fraud is our legitimate interest in running a shop that works.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to support@lunithlabs.com. We answer within one month. We may keep what the accounting rules require us to keep, and we will tell you when that applies.

If you are in the UK or the European Union and are not happy with our answer, you can complain to your data protection authority. In the UK that is the Information Commissioner's Office.

If you live somewhere that gives you other privacy rights, such as some US states, write to us and we will honour them. We do not sell or share personal information as those laws define it.

Mailing list

Buying something does not add you to any list. The sign-up forms on the site are a separate choice: you enter your address, we send one confirmation email, and you are on the list only once you click the link in it. We keep the address, the page you signed up from, and when you confirmed. Every email we send the list carries a one-click way out that works without signing in, and the address is marked unsubscribed the moment you use it. The list is kept in our own order book and sent through Resend; it is never shared or sold.

Children

The site is not aimed at children, and we do not knowingly collect personal data from anyone under 16.

Changes to this page

When this page changes, the date at the top changes with it. If a change affects how we use data we already hold, we will tell the people it affects by email before it applies.