Privacy & security
Moonstration is a private journal first. Here’s, in plain words, how your information is protected.
🔒 Your cycle days are yours alone
If you track your Moonstration (cycle) days, they’re encrypted on your own device before they’re saved, with a key unlocked by your password and a recovery code only you have. We store only the encrypted form, which can’t be read without them, so no one at Moonstration, including our admin, and no other website can read your cycle days from what we store. They’re never shared with your Moon Group or the Comoonity, and they’re never part of an account backup. Keep your recovery code safe: if you reset your password, it’s what unlocks them.
Private by default
Your day notes, plant findings, photos, plants and measurements are private unless you choose to share an entry with your Moon Group or the Comoonity. Every request to our database is checked against rules that let each account reach only its own records and what others have chosen to share with it.
Your photos stay yours
Other members can’t attach your photos to their entries or re-share them. A photo is seen only by you, and by the people you share that entry with. When someone else views it, it carries their username and a trace code, so a screenshot shows who took it. You’re told when someone saves your photo, and when their device signals a screenshot. Other members’ photos don’t print.
Your password
Your password is handled by our sign-in service and stored only in scrambled (hashed) form, so no one can look it up, including us. Use a long password you don’t use anywhere else. On a shared computer, untick “Remember me” and use “End session” when you’re done.
Payments and the store
Payments go through Stripe’s secure checkout. Your card number never reaches Moonstration. The shipping address you give for a store order is seen only by our admin, to send your order, and the store’s business records are admin-only.
Account backups
We keep a secure backup of each member’s basic account details so we can identify members after a data breach, or when the law requires it. You choose whether to add more, like day notes or photos. Only our admin can open a backup, every opening is recorded, and older copies are removed after 30 days. Cycle days are never included.
Every connection is encrypted
Every page and every bit of data between your device and Moonstration travels over an encrypted (HTTPS) connection. We don’t sell your personal information, and we don’t run advertising trackers.
Questions or concerns
No website can promise perfect security, but protecting you is built into how Moonstration works, and we keep improving it. If you ever notice something that doesn’t look right, write to hope@moonstration.org. For the full details, see our Privacy Policy.