Privacy

Version 1.0, 2 November 2026. This notice covers the website moonlightapp.de, the site joinmoonlight.app and the Moonlight app during the Berlin beta, which opens on 4 December 2026. It is written in plain English. A German version follows.

Who is responsible

Oh My Moonlight UG (haftungsbeschränkt), Kollwitzstr. 76, 10435 Berlin, Germany. Register: Amtsgericht Charlottenburg, HRB 276887 B. Privacy questions: hello@moonlightapp.de.

This website

Hosting. moonlightapp.de is built and hosted with Framer (Framer B.V., Amsterdam, Netherlands). When you open a page, Framer's servers receive the technical data every website needs to answer you: your IP address, the time, the page you asked for and the type of browser. Framer keeps these server logs for a short time for security and deletes them. We rely on our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Part of Framer's network sits outside the EU; the transfer is covered by the EU standard contractual clauses in our contract with Framer.

Visitor numbers. We count visits with Framer's own statistics. They work without cookies, store nothing on your device and build no profile of you. That is why this site shows no cookie banner. If we ever add a tool that needs consent, we ask first.

The beta list. When you join the beta list, we store your email address and the time you signed up, so we can tell you when the beta opens and send you your invitation. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to hello@moonlightapp.de. We keep the address until the beta list is closed or you ask us to remove it, whichever comes first.

The Sis Haven form. When a venue applies to become a Sis Haven, we store the name of the venue, its address, the contact person and the opening hours, so we can visit and talk. Legal basis: the steps before a contract (Art. 6(1)(b) GDPR). If no listing comes out of it, we delete the application six months after the last contact.

Email. Our email runs on Google Workspace (Google Ireland Limited, Dublin). Mail may be processed on Google's servers outside the EU under the EU-US Data Privacy Framework and the EU standard contractual clauses.

Links. The Instagram and LinkedIn icons are plain links. Nothing is sent to those companies until you click.

joinmoonlight.app

joinmoonlight.app is our site where anyone can post, without an account, what happened to them in a public place. The form asks what happened, where, when, whether anyone stepped in, and one line in your own words. You may add an email address if you want to hear whether your post went on the map; it is optional.

Your post is stored with the time it was sent, not with your name and not with your IP address. A person at Moonlight reads every post. What goes on the map is a pin with the category, the place and the time. Your words are never published, unless you ticked "You may share my post, with the details changed" and we retell it with names, places and details changed so that nobody can be recognised.

Legal basis: you choose to post, and we have a legitimate interest, shared with the people who use the map, in making patterns in public places visible (Art. 6(1)(f) GDPR). A post may describe harassment or assault. We treat every post as sensitive and store it with restricted access. An email address you add is deleted once we have answered you, at the latest after 90 days. A post you want removed is removed: write to hello@moonlightapp.de and say roughly when you sent it.

The Moonlight app

The table lists what the app processes, why, on what legal basis, and for how long.

What Why Basis (GDPR) How long Email address, password (stored scrambled), the date you verified your email Your account and sign-in Contract, Art. 6(1)(b) Until you delete the account, then 24 hours Date of birth you typed at sign-up To check that you are 18 or older Legal obligation and contract, Art. 6(1)(c) and (b) Checked and discarded; only the birth year is kept for statistics Gender, as you declared it Moonlight is for women; shown to others only if you switch it on Contract, Art. 6(1)(b); legitimate interest in a women-only space, Art. 6(1)(f) Until deletion Username, portrait number, level and points Your profile Contract Until deletion Reports you send: what happened, where (street level), when, your optional line, anonymous or with your username The map; moderation Contract; legitimate interest of members in knowing what happened near them, Art. 6(1)(f) Shown for 7 days on the map; kept for 90 days to recognise patterns; a report you withdraw is removed The phone's position when you send a report, only if you tick "Share my location with moderators" To spot false reports Consent, Art. 6(1)(a) and §25(1) TDDDG; withdraw any time on the report sheet 30 days Your position while the app is open To centre the map on you Contract; needed for the service you asked for, §25(2) TDDDG Not stored Safety Squad contacts: the name and phone number or email you add To send them your location and the time when you alert them Contract for you; legitimate interest for the contact, Art. 6(1)(f); the contact is told at the first message and can opt out Until you remove them or delete the account Alert events: time, location, who was told, cancel The alert itself; a record for you Contract; vital interests, Art. 6(1)(d) 30 days Objections, moderation decisions, case files Moderation, appeals, legal defence Legitimate interest, Art. 6(1)(f); legal obligation under the Digital Services Act Case file of a closed account 3 years, then deleted Technical logs: IP address, app version, errors Security and stability Legitimate interest, Art. 6(1)(f) Security logs 7 days, operational logs 14 days Beta feedback you give us Improving the app Consent Until the beta ends, then anonymised

We do not use your data to decide anything about you automatically. A person reads every report and makes every moderation decision.

"Anonymous" means other members cannot see who posted a report. Moonlight's moderators can see the account behind it; they need that to answer you and to act on misuse.

Reports may describe harassment or assault. We treat every report as sensitive, store it with restricted access, and never use it for advertising or profiling. The guidelines ask you to leave out anything that identifies a person; a moderator removes such details before a report shows.

Who receives data

People at Moonlight who need it for their work: the moderators, the two founders. Suppliers who process data for us under a contract (Art. 28 GDPR): our hosting provider in the European Union; our email delivery provider for sign-up and reset emails; Apple and Google for push notifications; the map provider, which receives your IP address and the area of the map you look at; the identity-check partner, once verification is live, which checks your ID and tells us only whether you passed. We name each supplier on request at hello@moonlightapp.de. We do not sell data and we do not share it with advertisers.

Your Safety Squad contacts receive your location and the time only when you alert them.

We pass information to the police when someone else is in danger, when you cannot decide, or when the law requires it. When only you are in danger and you say no, we do not. Two people at Moonlight agree on every such step, and it is logged.

Where data is kept

The app's data is kept on servers in the European Union. Backups are kept for 30 days; a deletion is applied to backups before any restore. Where a supplier processes data outside the EU, the transfer rests on the EU-US Data Privacy Framework or the EU standard contractual clauses, and we can send you a copy of the safeguard on request.

Your rights

You can see your data (Art. 15), correct it (Art. 16), have it deleted (Art. 17), limit how we use it (Art. 18), take it with you (Art. 20), and withdraw a consent at any time (Art. 7(3)).

You can object. Where we rely on our legitimate interest, you can object to that processing for reasons that come from your particular situation (Art. 21). Write to hello@moonlightapp.de and we stop, unless we can show grounds that outweigh yours.

In the app: Profile, Privacy, "Your data, download a copy", and Profile, Account, "Delete account". By email: hello@moonlightapp.de. You can complain to the Berlin data protection authority, Berliner Beauftragte für Datenschutz und Informationsfreiheit, datenschutz-berlin.de.

Deleting your account hides your profile at once and deletes everything within 24 hours, except a case file kept for three years where an account was closed for breaking the guidelines, as the law allows (Art. 17(3)(e)).

For an account you need an email address, a date of birth and your declared gender. Everything else is optional.

The Plan International points

The map shows points collected by Plan International in Berlin in 2020, with their permission and credited on each point. They contain no names and no addresses of persons.

Children

Moonlight is for people aged 18 and over. If we learn that an account belongs to someone younger, we close it and delete its data.

Changes

This notice is dated. When it changes, the app and the website tell you before the change applies, and the main changes are listed at the end of the newer version.