Privacy Policy

1. Who We Are

Lunar Shadow Garden (lunarshadowgarden.com) is an independent free-to-play entertainment website. We are the data controller for any personal data processed in connection with this website.

Data controller contact: privacy@lunarshadowgarden.com

2. What Data We Collect

We collect as little data as possible. Here is exactly what we process:

Server Logs

Our hosting provider automatically records standard web server logs including your IP address, browser type, operating system, referring URL, and the date and time of your request. These logs are used exclusively for security monitoring and are retained for no more than 30 days, after which they are automatically deleted.

Cloudflare Analytics

We use Cloudflare's privacy-focused analytics to understand aggregate site usage (page views, country, browser type). Cloudflare analytics does not use cookies and does not track individual users across sessions. Data is anonymised before we see it.

Email Correspondence

If you contact us by email, we will process your email address and the content of your message to respond to your enquiry. We retain email correspondence for up to 90 days after the matter is resolved, then securely delete it.

What We Do NOT Collect

• No user accounts or registration data
• No tracking pixels or advertising cookies
• No third-party analytics (no Google Analytics)
• No payment data (no real money is transacted)
• No game progress saved on our servers (all state is client-side only)

3. Legal Basis for Processing (UK GDPR Article 6)

Data	Legal Basis
Server logs	Legitimate interests — security and abuse prevention
Cloudflare analytics	Legitimate interests — understanding aggregate usage
Email correspondence	Consent (you initiate contact) / Legitimate interests (responding to your request)

4. Cookies

We use only strictly necessary cookies required for security and site delivery. We do not use advertising or tracking cookies. See our Cookie Policy for the full details.

5. Third-Party Services

Cloudflare

We use Cloudflare as our CDN and security provider. Cloudflare may process your IP address and other technical data as part of delivering the site and protecting against attacks. See Cloudflare's Privacy Policy.

Google Fonts

This site loads fonts from Google Fonts, which may result in your browser making a connection to Google's servers and sending your IP address. If you prefer to avoid this, you can use a browser extension that blocks Google Fonts requests. See Google's Privacy Policy. (Note: future versions of this site will self-host all fonts.)

6. Data Sharing

We do not sell, rent, or trade your personal data to any third party. Data is only shared with:

• Our hosting and infrastructure provider (for site delivery)
• Cloudflare (for CDN and security, as described above)
• Law enforcement or regulatory authorities, where required by law

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right	What it means
Access	Request a copy of the personal data we hold about you.
Rectification	Ask us to correct inaccurate or incomplete data.
Erasure	Request deletion of your personal data ("right to be forgotten").
Restrict Processing	Ask us to limit how we use your data in certain circumstances.
Portability	Receive your data in a structured, machine-readable format.
Object	Object to processing based on legitimate interests.

To exercise any of these rights, email privacy@lunarshadowgarden.com. We will respond within 30 days.

8. Children's Privacy

Lunar Shadow Garden is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately. If you believe a minor has provided us with data, please contact privacy@lunarshadowgarden.com.

9. Data Security

All data transmitted to and from lunarshadowgarden.com is encrypted using HTTPS (TLS 1.2 or higher). We use Cloudflare's DDoS protection and Web Application Firewall. Access to server infrastructure is restricted to authorised personnel only.

10. Data Retention

Data Type	Retention Period
Server logs	30 days, then automatically deleted
Email correspondence	Up to 90 days after issue resolution, then securely deleted
Cloudflare analytics	Aggregate only; no individual retention

11. Complaints

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the chance to resolve any concerns directly before you contact the ICO. Please email us first at privacy@lunarshadowgarden.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "last updated" date. For significant changes, we will add a notice on the homepage.