Privacy policy

What Emberlune keeps, where, and how to erase it. Last updated 13 November 2026.

In short

The app needs no account, no email and no real name. The only email address we ever hold is one you choose to give us for the waitlist.
No ads, no tracking, no analytics cookies, and your data is never sold. We only count totals per day, like how many readings were drawn (see below).
Luna only keeps a journal of your talks if you say yes. You can read, correct, export or erase all of it at any time.

The waitlist (this website)

If you leave your email address on this website, we keep that address, the date, and which page you joined from. Nothing else.
It is used for one email: to tell you the Emberlune app is open. It is never sold, shared or used for advertising.
That email has a link that deletes your address from the list straight away. If we have not written yet and you want to be removed, write to the contact address below.
To stop anyone flooding the list, we count sign-ups per network for a day. The network address is kept only as a one-way scrambled code, deleted after two days.
The free reading and the small tools on this website (yes or no, card of the day, birth cards) run in your browser: your question, your cards and your date of birth are never sent to us. If you tap "Keep this reading", that reading is saved in your own browser only (local storage), and you can remove it on the reading page at any time. Thoughts you write under "A question to sit with" on card pages, and a letter to yourself, are kept the same way: only in your browser, never sent to us, and deleted whenever you choose. To greet you when you come back, your browser also keeps the days you visited, the last card you drew and your birth cards (never your date of birth). The home page has a "Forget this" button that clears them.
"Was this page helpful?" keeps only a total of yes and no answers per page. To count one answer per network per page per day, the network address is kept as a one-way scrambled code for two days.
If you write to us on the contact page, we keep your message, its topic and the email address you chose to give for an answer (if any), until we have read and answered it. The network limit on messages uses the same one-way scrambled code as above.
The list is stored in Cloudflare D1, like the rest of Emberlune. This website sets no cookies and has no ads or trackers.

The app

The rest of this page describes the Emberlune app, which opens soon.

How Emberlune knows it is you

On your first visit Emberlune gives your browser a random secret key in a cookie. Scripts cannot read it and other sites cannot send it. The server stores only a one-way scrambled version of the key (a SHA-256 hash), never the key itself. This is the only cookie, and it lasts two years. If you clear your cookies, Emberlune will not recognise you any more, unless you saved a recovery key.

Recovery key (optional): in Luna's Journal you can make a recovery key, 16 letters and numbers that you keep yourself. Entering it on another device (or after clearing this browser) opens the same journal there. It is shown to you once; the server keeps only a one-way scrambled version of it, so we cannot show it again or recover it for you. Making a new key stops the old one working, and "Delete all my data" deletes it.

What is kept

Always: your choices (memory on or off, your age answer), your learning progress in the Library and the Journey, your Daily Magic cards and quests, your Moon Dust, and Luna's Collection. These say nothing about your life.
Only if you turn memory on: your conversations with Luna, your readings (with any line you write on one, such as an evening note about your daily card), the notes Luna asks to remember (each one only after you agree), and short searchable summaries of your talks so she can recall them later.
In a private session: nothing new is saved at all.
Only if you turn on the daily reminder: the address your browser's own push service gives for this device, your time zone and the hour you chose, so the reminder comes once a day at that time and only on days you have not drawn your card. The reminder carries no message of its own; it always says the same line. Turning it off (Settings) deletes the address.
Your name (optional): the name you would like Luna to call you is kept on this device only (Settings > Your name). It is sent to Luna's AI with your messages so she can use it. In Hebrew, how you would like Luna to speak to you (feminine, masculine or without gender) is kept the same way, on this device, and reaches the AI only as an instruction for her wording.
Help improve Luna (Settings): when this is on, the questions you ask Luna (in a talk or for a reading), the spread and cards, the topic (love, work or other), the language and Luna's answer are copied for the Emberlune team to read, to make Luna better. They are kept without your email or any link to your device or your journal. On the private preview for friends, the first name you gave in the app goes with them, so the team knows who asked (the friends agreed to this); everywhere else no name is kept, so they cannot be traced back to you (and cannot be found and deleted one by one later). Messages about self-harm or a crisis are copied too, marked as such, together with the help lines Luna gave (they still never reach the AI). It is off unless you turn it on, except on the private preview for friends: there it is always on and cannot be turned off for the length of the test (the friends agreed to this in person). If you do not want your questions shared, please do not use the preview; the public app keeps it off unless you turn it on. The team keeps these questions in a private Notion workspace (Notion Labs, Inc.).
Feedback you send (Menu > Send feedback, or after a reading): your words and, for a reading, its spread and cards, kept for the team with the questions above (on the friends preview, with the name you gave). On the friends preview, a message from "Write to us" is also kept there with your name (never the email address you may add for a reply).
Only if you write to us: your message, its topic, and the email address you chose to give for an answer (if any), kept until the team has read and answered it.
Only if you ask to hear when Emberlune Plus opens: your email address, for that one message. Every email has a link that deletes your address.
Daily totals: to learn which parts of Emberlune people use, the app adds 1 to a total for the day when something happens: a visit (once a day), each time the app opens, a reading and its kind, a first reading on a device (counted once, using a mark kept only on that device), a message to Luna, a lesson, a chapter, a shared picture, a card sent to a friend or opened from a friend's link, a small intention chosen for the day, a reading opened in full, the plain text style turned on. The card in a friend's link travels only in the link itself (after its # sign, which browsers never send to a server): Emberlune does not keep it. When a link to Emberlune names where it was shared (for example ?utm_source=instagram), the first visit on a device adds 1 to that place's total, and each opening of the app through such a link adds 1 to another total for that place: only the name of the place is kept. Opening the page about Emberlune Plus adds 1 to a total for what led there (for example a spread or a chapter). If Emberlune's own code fails on your device, it adds 1 to a total for the place in its code where that happened (a file name and a position), never the error's message, at most three times a visit. Only the day, the kind of thing and the number are kept. There is no cookie, name, address or device in it, and never a question, a message or a card you drew. Nothing is counted in a private session, or when your browser asks sites not to track you (Global Privacy Control or Do Not Track).
Counters: how many messages you and your network sent to Luna's AI today, so the daily allowance stays fair. Your network address is kept only as a one-way scrambled code, and these counters are deleted after two days.

Where it is kept, and who processes it

Emberlune runs on Cloudflare (Workers and the D1 database). Your data is stored there.
When you talk with Luna's AI, your message, the recent conversation, the cards on the table and (only with memory on) the notes and moments that matter for your question are sent to Cloudflare Workers AI, which runs the model that writes her reply.
Messages about suicide or self-harm are never sent to the AI (see Safety).

Your choices

See and export: Menu > Luna's Journal shows everything Luna remembers; its Privacy tab has "Export my journal", which gives you all of it as a file.
Correct: edit or delete any note Luna remembers, and delete any reading or conversation, in the journal.
Erase: in the same Privacy tab, "Forget everything" deletes your conversations, readings, notes, progress, Daily Magic and Collection. "Delete all my data" also deletes your identity and clears the cookie.
Turning memory off stops new journal entries straight away.

Who is responsible for your data

Emberlune is run by Karin Refael, an independent developer in Israel, who decides how your data is used (the "data controller"). To reach her about your data, use the contact below.

Why Emberlune may use your data

To give you the app you asked for: the cookie that recognises you, your progress, Daily Magic, the Collection and your settings.
Only with your yes: Luna's memory (your journal), "Help improve Luna", the daily reminder, and an email address you give us. You can take back any yes at any time, in Settings or in the journal; that stops it from then on.
To keep Emberlune fair, safe and working: the daily totals and the counters for the AI allowance. They hold no name and no message.

How long it is kept

Your journal, progress, Daily Magic and Collection: until you delete them (Luna's Journal > Privacy), or until Emberlune closes.
The cookie: two years from when it was made, or until you clear it.
The AI allowance counters: two days.
A message you write to us: until we have read and answered it.
An email address for news of Emberlune Plus: until that one email is sent, or until you use the link that deletes it.

Data outside your country

Cloudflare and Notion are companies based in the United States, and they may process data in other countries than yours. They protect data sent abroad with the safeguards the law asks for, such as the European Commission's Standard Contractual Clauses.

Your rights

You can ask to see, correct, export or delete your data, and to object to how it is used; most of this you can do yourself at once in Luna's Journal. If you think we have not handled your data properly, please tell us first (see Contact), and you can always complain to the data protection authority where you live, for example Israel's Privacy Protection Authority or the data protection authority of your country in the European Union.

Children

Luna's memory and "Help improve Luna" are for people aged 16 and over: before either is turned on, anyone who has not said they are 18 or older is asked whether they are 16 or older. Luna's AI conversation is only for adults (18 and over). Younger visitors can use the readings from Luna's book, the Library, the Journey and Daily Magic.

Contact

Questions or requests about your data: in the app, open Menu > Settings > Write to us and choose "Privacy or my data". If you would like an answer, add your email there; it is used only to answer you. On this website, you can also use our contact page.