Privacy Policy

1. Introduction

Lunary Games SAS ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are a company based in France, and we process personal data in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable international data protection laws.

2. Legal Basis for Processing

Under GDPR, we process your personal data under the following legal bases:

• Consent: You have given us clear consent to process your personal data for a specific purpose (e.g., newsletter subscription).
• Contract: Processing is necessary for a contract we have with you (e.g., providing game access, processing purchases).
• Legal Obligation: We are required by law to process your data (e.g., tax records).
• Legitimate Interests: Processing is necessary for our legitimate interests (e.g., security, fraud prevention, game analytics) unless overridden by your rights.

3. Information We Collect

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services.
• Improve, personalize, and expand our games and website.
• Process your transactions and manage your orders.
• Detect and prevent fraud, cheating, and security breaches.
• Send you emails, including updates, security alerts, and support messages.
• Analyze trends and gameplay data to balance game difficulty and fix bugs.

5. International Data Transfers

As a French company, our primary servers are located in the EU. However, we may use third-party service providers (e.g., for analytics, hosting, or payment processing) located outside the European Economic Area (EEA), such as in the United States.

When we transfer personal data to countries outside the EEA, we ensure appropriate safeguards are in place, such as:

• Transferring to countries with an "Adequacy Decision" by the European Commission.
• Using Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• - Account Data: Retained as long as your account is active, plus a grace period.
• - Transaction Data: Retained for 10 years as required by French tax law.
• - Telemetry Data: Anonymized or deleted after 24 months.

7. Your Rights (GDPR & International)

Regardless of your location, we strive to provide you with control over your data.

• Right to Access: Request copies of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention obligations).
• Right to Restrict Processing: Request to limit how we use your data.
• Right to Data Portability: Request transfer of your data to another organization.
• Right to Object: Object to processing based on legitimate interests or direct marketing.

To exercise these rights, please contact us at our support page. We will respond within 30 days.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the CCPA:

• Right to Know: You may request disclosure of the specific categories and pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: You may request the deletion of your personal information.
• Right to Opt-Out: We do not sell your personal information. If we did, you would have the right to opt-out.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

9. Third-Party Service Providers

We may share data with the following categories of third parties:

• Cloud Infrastructure: (e.g., AWS, Azure, Google Cloud) for hosting game servers and databases.
• Analytics Providers: (e.g., Google Analytics, Unity Analytics) to understand usage.
• Payment Processors: (e.g., Stripe, PayPal, Steam, Epic) to handle payments securely.
• Customer Support Tools: To manage support tickets.

10. Children's Privacy

Our Services are not intended for children under 13 (or under 16 in certain European jurisdictions). We do not knowingly collect personal data from children. If we discover we have collected data from a child without parental consent, we will delete it immediately. Parents can contact us to review or delete their child's data.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Officer (DPO) at: