Moon Runners Club
Privacy Policy
Moon Runners Club ("we", "us") operates moonrunnersclub.com. This policy explains what personal data the website collects and how it is used.
Data we collect
- Contact form: name, email address, optional phone number, and message.
- Administrator accounts: name, email address, and a hashed password. Passwords are stored as PBKDF2-SHA256 hashes, never plain text.
- Technical data: IP-derived rate-limit counters (stored as salted hashes), request logs, and error logs used to keep the service secure and available.
- Local storage: the admin dashboard stores an authentication token in your browser. The public site does not use advertising cookies.
How we use data
- Reply to messages and sponsorship enquiries.
- Operate, secure, and troubleshoot the website and API.
- Prevent spam, abuse, and unauthorized access.
Legal basis
We process contact data because you asked us to respond, and technical data for our legitimate interest in keeping the service secure.
Sharing
The site is hosted on Cloudflare (Pages, Workers, D1, R2). Cloudflare processes data on our behalf. We do not sell personal data. We may disclose data if required by law.
Retention
Contact messages are kept until the enquiry is resolved and then archived or deleted. Rate-limit counters expire automatically. Server logs are retained for a short operational period.
Your rights
You may request access to, correction of, or deletion of your personal data. Email [email protected] and we will respond within a reasonable period.
Security
We use HTTPS, hashed passwords, short-lived access tokens, rate limiting, and restricted admin endpoints. No system is completely secure; report concerns to the email above.
Children
The website is not directed at children under 13, and we do not knowingly collect their personal data.
Changes
We may update this policy. The date at the top shows the latest revision.