Moonlaunch Studio

Privacy policy

Effective date: October 24, 2026

Moonlaunch Studio, operated by Moon Launch LLC ("we", "us"), runs moonlaunch.studio. This is a static informational website. We also publish an email newsletter and sell one paid service, the Leaked-Key Triage Review, to businesses. We've kept data collection to a minimum, and this policy explains exactly what that means.

Who is responsible for your data

The controller of personal data described in this policy is Moon Launch LLC, which operates Moonlaunch Studio. You can contact us by email at partners@moonlaunch.studio.

What we collect

  • No accounts or forms on this site. moonlaunch.studio itself has no accounts, login, comment system, contact form, sign-up form, or JavaScript. Our newsletter sign-up page is hosted by beehiiv, not on this site, and is covered by beehiiv's privacy policy and its cookies. See "Our email newsletter" below.
  • No analytics or tracking on this site. We don't use analytics tools, advertising pixels, or tracking code. The site runs no JavaScript. (Pages include structured data in a machine-readable format for search engines; it isn't executed and doesn't collect anything.)
  • Cookies. We don't set cookies; our host may set strictly necessary security cookies. See "Hosting and server logs" below.
  • Email you send us. If you email partners@moonlaunch.studio, we receive your email address and whatever you include in the message. We use it only to reply and to handle your request (for example, a correction). Mail sent to this address is received by Cloudflare Email Routing and forwarded to a mailbox provided by Google (Gmail); each processes messages under its own privacy policy.

Our email newsletter

If you choose to subscribe to our newsletter, this section applies to you.

  • Who sends it. The newsletter is sent by Moon Launch LLC, 5900 Balcones Drive, Ste 100, Austin, TX 78731, United States.
  • Where you sign up. The sign-up page is hosted by beehiiv, Inc., the email service provider that delivers our newsletter. beehiiv acts as our service provider (processor) and handles your data on our behalf. Its sign-up page may use its own cookies and is covered by beehiiv's own privacy policy.
  • What we collect. Your email address, and your name if you choose to give it. We also keep a record of your consent: when and where you signed up and when you confirmed. Our provider also records delivery and engagement information such as bounces, unsubscribes, email opens, and link clicks.
  • Why. To send you the newsletter you asked for (software comparisons and updates, which may include affiliate links) and to operate and secure the mailing list.
  • Double opt-in. You're added to the list only after you confirm your subscription from the confirmation email we send you.
  • Tracking in our emails. Our emails contain a tracking pixel (a tiny image) and tracked links, both provided by beehiiv. The pixel records when a subscriber opens an email, and tracked links go through beehiiv's link-tracking service, which records when a subscriber clicks a link. We use this to see whether issues are opened and which links are used. Our beehiiv plan doesn't offer a setting to turn this tracking off. You can limit open tracking by turning off automatic image loading in your email app, and you can avoid click tracking by not clicking links in our emails, or stop both by unsubscribing.
  • Unsubscribe anytime. Every email includes an unsubscribe link, or you can email partners@moonlaunch.studio. We honor opt-outs within 10 business days; unsubscribes through the link usually take effect right away.
  • How long we keep it. We keep your subscriber data while you're subscribed. When you unsubscribe, we delete or suppress your data, keeping only a suppression record (your email address and the date you unsubscribed) so that we don't email you again.
  • No sharing with other newsletters. We don't sell, rent, or share subscriber email addresses, and we don't use purchased or scraped lists. We don't use beehiiv's Recommendations or Boosts features, and we never share subscriber data with other newsletters.

Our paid service: Leaked-Key Triage Review

If your business buys the Leaked-Key Triage Review (the "Review"), this section applies. The Review is sold only to businesses located in the United States, Canada (except Québec), Australia, New Zealand, Singapore and Switzerland. Its terms are in our Services Addendum.

  • What we collect. At checkout, Stripe collects for us your name, email, business name, billing address and, if you give it, your business's tax registration number (such as an ABN, GST/HST, GST or VAT number). Stripe handles your card details; we never see them. When you send your checklist answers, we receive your email address and whatever you include. The checklist asks for names, counts, file paths, dates and dollar totals with secrets redacted, and we ask you not to include personal data about your own users or customers.
  • Why. To take payment, perform the Review and deliver your fix list, to confirm you're a business in a country we serve, to screen orders against US sanctions lists, and to keep tax and accounting records.
  • Who processes it for us. Stripe (payments and checkout), Cloudflare (website, email routing and any form handler), Google (Gmail, where email is received), and xAI (the xAI API, an AI tool that helps draft the fix list). An AI tool sees your answers only after an automated screen for secrets and instruction-like text has passed them, and a person reviews every fix list before it's sent. Each provider processes data under its own terms and privacy policy; xAI's API terms include its Data Processing Addendum.
  • Secrets sent by mistake. If you send an API key, password or other secret, we stop, delete it from every place we control as soon as we can, tell you, and advise you to rotate it. Copies may remain briefly in our email provider's systems.
  • How long we keep it. We delete your answers, our report and any form data 30 days after delivery (or 30 days after the Review ends without delivery). We keep basic purchase records (name, business name, billing address, tax registration number if given, email, date and amount) for as long as tax and accounting law requires. You can ask us to delete your answers sooner.
  • No other use. We don't sell your data, use it for advertising, name you as a client without your written permission, or forward your answers to anyone other than the providers above, including other businesses' AI agents, whether or not they offer to pay.

Hosting and server logs

The site is hosted on Cloudflare Pages. Cloudflare may also set strictly necessary security cookies (for example, to block bots). Like most web infrastructure, Cloudflare may process technical data such as IP addresses, browser type, and request times to deliver pages, keep the service secure, and prevent abuse. We don't use this data to identify or profile visitors. See Cloudflare's privacy policy for details on its processing.

Legal basis for processing

If data protection laws such as the EU or UK GDPR apply to you, we rely on these legal bases:

  • Contract for taking payment for, performing and delivering the Leaked-Key Triage Review, and legal obligation for keeping purchase records for tax and accounting and for sanctions screening.
  • Consent for the newsletter, including open and click tracking in our emails. You give consent when you sign up and confirm your subscription, and you can withdraw it at any time by unsubscribing. Withdrawing consent doesn't affect processing that happened before.
  • Legitimate interests for replying to email you send us and keeping records of that correspondence, for operating and securing the website (including the security processing our host carries out), and for keeping a suppression record after you unsubscribe so we don't email you again. You can object to this processing by emailing us.

International transfers

We're based in the United States. Our service providers, Google (email), Cloudflare (hosting and email forwarding), beehiiv (newsletter sign-up and delivery), Stripe (payments) and xAI (AI drafting for the paid Review), are based in the United States and may process data in the US and other countries. If you're in Canada, Australia, New Zealand, Singapore or Switzerland, this means your information is stored and processed outside your country, where local law may differ and where courts and authorities there may be able to access it. We choose providers with contractual privacy and security commitments. Where the GDPR applies, these transfers rely on the safeguards those providers offer, such as the EU-US Data Privacy Framework or standard contractual clauses, as described in their own privacy policies.

Affiliate links and third-party sites

Some links on this site are affiliate links, and links in our newsletter may become affiliate links. When you click a link to another site, including affiliate links, you leave moonlaunch.studio. The vendor's site, and any affiliate network involved (currently FirstPromoter for Hypefury and ContentStudio, and Rewardful for Smartlead), may use cookies or similar technologies to record that you arrived from our site so they can attribute a purchase or sign-up. Those sites have their own privacy policies, and we don't control the data they collect. We may receive aggregated reports from affiliate programs (such as the number of clicks or sales), which generally don't identify you to us.

How long we keep email correspondence

We keep email correspondence only as long as needed to respond and keep reasonable records, then delete it. You can ask us to delete your messages at any time. Newsletter subscriber data is covered under "Our email newsletter" above.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict use of personal information we hold about you, to object to its processing, and to receive a copy of it. The personal information we hold is email you've sent us, your newsletter subscriber data if you subscribe, and, if your business buys the Review, the purchase and Review data described above. To make a request, contact us at partners@moonlaunch.studio and we'll help.

We don't sell or "share" personal information (including for cross-context behavioral advertising), as those terms are defined under California law.

If you're in the EU, the UK, or another place with a data protection authority, you also have the right to complain to your local supervisory authority. For example: in Canada, the Office of the Privacy Commissioner of Canada; in Australia, the Office of the Australian Information Commissioner; in New Zealand, the Office of the Privacy Commissioner; in Singapore, the Personal Data Protection Commission; and in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). We'd appreciate the chance to fix your concern first, so please contact us.

Do Not Track

Some browsers send a "Do Not Track" signal. Because we don't track visitors across sites or use analytics, the site behaves the same whether or not your browser sends it. Open and click tracking in our newsletter emails (described above) happens in the email, not on this site, so a browser Do Not Track setting doesn't turn it off. See "Tracking in our emails" above for how to limit it, or unsubscribe.

Children

This site is intended for adults evaluating business software and isn't directed at children under 16. We don't knowingly collect information from children.

Changes

If we change how the site or our newsletter handles data (for example, if we add analytics to the site, change the tracking settings in our emails, or change how we handle data for the paid Review or which countries it's sold in), we'll update this policy and the effective date above before the change takes effect.

Contact

Moon Launch LLC (Moonlaunch Studio)
Contact us by email at partners@moonlaunch.studio.

Business mailing address:

Moon Launch LLC
5900 Balcones Drive, Ste 100
Austin, TX 78731
United States