Privacy Policy

Who operates Moonfolio

Moonfolio is a personal project operated by Lucas Savioli Scaravelli under the Telescope Espresso name. For privacy requests, account or content removal, and other questions, contact telescopeespresso@gmail.com.

Information we process

• Account information: your email address, account identifier, authentication credentials handled by Supabase Auth, and account activity needed for sign-in and recovery.
• Profile information: your handle and any description, country, website, or avatar you choose to provide.
• Contributions: uploaded media, file information, titles, selected lunar regions, and submission and moderation records.
• Technical information: hosting and security services may process IP addresses, request details, browser information, timestamps, and error logs to deliver and protect the site.

What is public

Your profile handle, avatar, description, country, and website are public when provided. Approved observations can appear in public collections with your attribution. Drafts and submissions awaiting review are accessible to you and authorized moderators; they are not published in the public collection. Your account email and password are not displayed on your public profile. Avoid including private information in profiles or uploads.

Why we use information

We use information to create and manage your account, publish the profile and observations you request, send confirmation and password-recovery emails, review submissions, prevent abuse, and diagnose service problems. Account and contribution processing supports the service you request under our Terms. Necessary security and maintenance processing supports our legitimate interests, subject to your rights. We may also process information to meet legal obligations. Where consent is required for an optional purpose, we will request it separately.

Cookies and browser storage

We use essential Supabase authentication cookies to keep you signed in and support account verification. Cookie names generally start with sb- and may be split into several parts. Session cookies can remain for up to 400 days and refresh while you use your account; sign-out clears the current browser’s session. Temporary verification cookies support authentication flows. Cookie expiry does not guarantee that a login remains valid for that entire period.

Session storage remembers when you dismiss the fullscreen hint and supports navigation behavior. It lasts for the browser tab’s session. These features do not track you across other websites. The application does not include advertising pixels or analytics trackers. You can clear or block cookies and storage in your browser, but sign-in and some preferences may stop working.

Service providers and international processing

We use Supabase for authentication, database services, and media storage, and Cloudflare for hosting and delivery. Authentication emails are delivered through the email service configured for the project. These providers process information needed to perform their services. Depending on their infrastructure and configuration, processing may occur outside your country, including outside Brazil. Applicable international-transfer requirements must be met. We may disclose information when legally required or necessary to protect rights and security.

Retention and security

Account and profile information is kept while your account is active. Contributions and moderation records are kept as needed to provide and protect the service. Unfinished upload drafts expire for editing after 24 hours and are scheduled for cleanup after 48 hours. Some records may need to be retained for legal obligations, security, or disputes; backup copies may persist until the provider’s retention period ends. We use access controls and protected authentication cookies, but no online service can guarantee absolute security.

Your choices and rights

You can edit your profile through your account. You may request confirmation of processing, access, correction, portability where applicable, information about sharing, or deletion of your account and personal information. You may also request review of unnecessary or unlawful processing and withdraw consent for any processing that relies on it. Some rights have legal exceptions. We may verify your identity before acting on a request. Use the contact listed above for requests, including account or contribution removal. You may also contact Brazil’s data protection authority, ANPD.

Changes

We will update this page when our practices change and provide additional notice for material changes where required.