Who is responsible
Moonshot at moonshot.day is operated by Andre Valentin, Denmark, the controller responsible for personal data used by this free, non-commercial hobby game. You can reach Andre Valentin without an account through the contact form; choose “Privacy request” for a data-protection question.
What we collect and why
- Accounts: your chosen username, email address, account dates and authentication settings. A real name is optional. Passwords are stored as hashes, not readable passwords. If you enable passkeys or two-factor authentication, we store the verification information needed for those features, not your device’s biometric data.
- Google sign-in: Google supplies an account identifier, email address and email-verification information. We use these to authenticate you or connect Google to your existing account. We do not save your Google profile photo or real name, or retain Google access/refresh tokens. We do not request access to Gmail, Drive or contacts. Google also processes the sign-in under its Privacy Policy.
- Sign in with Apple: Apple supplies an account identifier and an email address, which can be an Apple private relay address if you choose Hide My Email. We use these to authenticate you or connect Apple to your existing account, and keep an encrypted Apple refresh token only so we can revoke Moonshot’s access when you disconnect Apple or delete your account. We do not use the name Apple may share.
- Play history: a player identifier, display name, holes and rounds played, scores, shot/progress data, timestamps, streaks and handicap history. Saved replays contain the flight data needed to play the shot back. Eligible holes-in-one by registered players may be saved automatically. Some information is stored for guests too; eligible guest history can be attached to an account when you register or sign in from that browser.
- Technical data: session identifiers, IP addresses, browser/device information and request/error logs used to keep you signed in, protect the game, diagnose failures and prevent abuse.
- Aggregate traffic statistics: for successful public-page requests from the website and online iPhone and Android apps, we use the IP address briefly to look up an approximate country in a local database, and request headers to recognise browser families, app/web traffic, referring website domains and known or suspected bots. We increment separate daily counters for these categories and the requested page category. The analytics database does not retain IP addresses, full browser strings, full URLs, query strings, account or guest IDs, or individual visit records. We do not send visitors' IP addresses to a geolocation provider.
- Optional daily reminders: if you allow notifications in your browser or the iPhone app, we store a device identifier and an encrypted push subscription: the delivery endpoint and keys for browsers, or the Apple Push Notification service device token for the app. This subscription belongs to the browser or app installation, not necessarily an account.
- Contact requests: the email address, topic and message you submit, and when the request was created or resolved. These are used to reply and handle your request. Please do not send passwords, payment details or unnecessary sensitive information.
We do not sell personal data, send advertising campaigns, or use advertising or third-party audience-analytics trackers. Administrators can inspect game records, aggregate game statistics and aggregate traffic statistics to run and improve Moonshot.
What other players can see
Your username or guest display name, scores, rankings and handicap can appear on public leaderboards and scorecards. Anyone with a replay or result link can view its player name and game data; sharing platforms may cache preview images. Closed nine-hole rounds are unlisted, not confidential: anyone with the URL may be able to join or view them.
Your email, optional real name, authentication details and contact requests are not shown to other players. Choose a username that does not identify you if you want to play under a pseudonym. Other people can copy public or shared results, and we cannot remove copies from their devices or services.
The grounds for using your data
We use the information necessary to provide the game and account features you request to perform our agreement with you. Our legitimate interests in keeping Moonshot secure, reliable and fair support security logs, abuse prevention and administration of game records. Optional browser reminders rely on your permission and can be switched off at any time. We also process information when necessary to meet legal obligations, including handling privacy requests.
Acknowledging this policy is not consent to unrelated marketing or tracking. Scores, rankings and handicaps are calculated automatically for the game; they are not used to make decisions with legal or similarly significant effects on you.
Traffic statistics without tracking cookies
Our legitimate interest in understanding traffic and improving this free game supports the limited processing needed for these aggregate statistics. We use ordinary server requests, not analytics cookies, local-storage identifiers, browser fingerprinting, tracking pixels or an additional analytics script. We do not use the game's sign-in or guest identifiers for traffic analytics, follow people between visits, or measure individual visit duration. There is no analytics consent banner or in-product analytics switch. Your right to object to processing based on legitimate interests still applies; contact us with any concerns. Because only separate daily counters remain, we generally cannot identify or extract a particular person's contribution to them.
Cookies and browser storage
Moonshot uses first-party storage for game features and your choices, rather than advertising cookies:
- Sign-in and security: session and request-verification cookies. Sign-in sessions are configured to last up to 60 days of inactivity, unless you sign out or the session is otherwise invalidated.
- Guest progress: the guest-player cookie lasts up to one year and is refreshed when used, so returning to the same browser can recover your history.
- Reminders: a push-device cookie is configured for up to five years and is refreshed when used. Your browser may apply a shorter limit. Turn reminders off on each subscribed browser to remove its subscription.
- Preferences: local storage and preference cookies remember choices such as sound, appearance, completed tutorials and dismissed notices. Local storage stays until you clear it or the app replaces it.
You can clear or block storage in your browser, but this can sign you out, reset preferences or break access to guest progress. Clearing cookies does not delete server-side scores. Account deletion removes reminder subscriptions linked to your account’s player identities; a separate, unlinked guest subscription must be turned off in that browser or removed through a privacy request.
Providers and international processing
Laravel Cloud hosts the application and its infrastructure; the application is deployed in its eu-west-1 (Ireland) region. AhaSend delivers account-related emails. Google and Apple handle optional Google and Apple sign-in. Your browser’s push service (for example Apple, Google, Mozilla or Microsoft), or the Apple Push Notification service for the iPhone app, delivers notifications if you subscribe. Authorized administrators have access where needed to operate the game and answer requests. We may disclose information where legally required or necessary to handle abuse or legal claims.
These providers and their subprocessors may process information outside Denmark or the European Economic Area. The applicable provider arrangements and transfer safeguards, such as adequacy decisions or standard contractual clauses where required, depend on the service and destination. You can ask us for details or a copy of the relevant safeguards. The hosting region alone does not mean all processing stays in the EU.
Further provider information is available in Laravel’s legal and data-processing documents, AhaSend’s Data Processing Agreement and Google’s data-transfer information.
How long information stays
Aggregate traffic counters are retained for the last 90 UTC days, with older counters removed by a daily cleanup. Existing operational session and security records are separate from analytics and follow their own retention rules.
Account information is retained while you keep your account. Game history, scores and saved replays are retained to provide your flight log, ongoing leaderboards and shared links; they do not currently have an automatic age-based expiry. We assess removal requests individually, including whether information is still needed for these purposes or a legal obligation.
You can delete your account in Profile settings. This removes your account and login details, all linked game records and saved player names, leaderboard entries, replays, achievements, handicap history and linked reminder subscriptions from the live application. Your shared result and replay links stop working. Shared courses and other players’ results remain. Login sessions and password-reset tokens are removed too.
You can also request account and data deletion without signing in, or ask for specific personal data to be removed without deleting your account. Follow the steps on that page; we verify ownership before acting and normally complete verified requests within one month. Google-only users can set a password by email in settings before using the account-deletion control, or contact us for help.
Push subscriptions are removed when you unsubscribe through Moonshot or when the push provider reports that the subscription has expired. Contact messages are kept while we handle the request and automatically removed from the active inbox 90 days after they are marked resolved. Operational logs, backups and email-provider records have separate retention cycles: they are used for troubleshooting, security, delivery and recovery, and may outlast deletion from the live application. Ask us about the records relevant to your request; we do not promise immediate deletion from every backup or third-party cache.
Your choices and rights
You can edit your profile, disconnect Google or Apple after setting another login method, and turn off daily reminders. Under applicable data-protection law, you can request access, correction, deletion, restriction or a portable copy of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, withdrawing it does not affect earlier lawful processing. These rights have conditions and exceptions.
Submit a privacy request with enough information to locate your account or guest result. You do not need to be logged in. We may ask for proportionate verification before releasing or changing data. We normally respond within one month; if an extension is allowed for a complex request, we will explain it. You can also complain to Datatilsynet in Denmark or your local data-protection authority.
Children and changes
Moonshot is not specifically directed at children. If you are a parent or guardian concerned about a child’s information, please contact us so we can review it. We may update this policy as the game changes. The date above identifies this version; material changes will be highlighted in the game or communicated where appropriate.