Privacy Policy

Last updated: June 2026

1. What we collect

Pure Moonlight is designed to work without collecting personal data. Specifically:

• No account required. You never need to register or provide an email address to use any feature.
• Skin profile. Your skin type and concerns are stored exclusively in your browser's localStorage. This data never leaves your device and is not transmitted to our servers.
• Ingredient analysis. When you submit an INCI list or photo for analysis, that data is sent to our API for processing and is not stored after the response is returned.

Mobile app (Pure Moonlight Skin for iOS)

Our iOS app, Pure Moonlight Skin, follows the same privacy-first approach:

• Camera & photos. The app accesses your camera or photo library only when you choose to scan a product or analyze your skin. Images are sent for one-time analysis and are not used for identification, advertising, or model training. We do not access your photo library in the background.
• Optional account and sync. You can use core features without creating an account. If you choose to register, we process your email address and user ID, and your skin profile and saved items may be stored with Supabase so they can sync across devices.
• Local app data. Recent scans, saved products, routines, and preferences are stored locally by default. Data you explicitly sync through an account is stored on our service infrastructure.
• Purchases. RevenueCat processes subscription status and purchase history so premium access can be activated and restored. Payments are handled by Apple; we do not receive your payment-card details.
• No tracking or advertising. The app does not contain third-party advertising SDKs, does not sell personal data, and does not use collected data to track you across other companies' apps or websites.

2. Analytics

We use Vercel Analytics to understand how the site is used — which pages are visited, how often, and from which regions. This analytics system is privacy-friendly: it does not use cookies, does not fingerprint users, and does not track individuals across sessions or websites. The data collected is aggregated and anonymous.

3. Cookies

Pure Moonlight does not use tracking cookies. We do not use advertising cookies, retargeting pixels, or third-party tracking scripts. The only browser storage we use is localStorage for your skin profile, which you can clear at any time through your browser settings.

4. Third-party services

The site uses the following third-party services:

• Google Fonts — loads the Inter typeface. Google may log the request IP address. See Google's privacy policy.
• Vercel — hosting provider. Vercel processes server logs that may include IP addresses. See Vercel's privacy policy.
• OpenAI — the ingredient analysis AI summary feature sends ingredient list text to the OpenAI API. This data is subject to OpenAI's privacy policy. We do not send personally identifying information.
• Supabase — provides optional app account storage and cross-device sync. See Supabase's privacy policy.
• RevenueCat — manages app subscription status and purchase restoration. See RevenueCat's privacy policy.

5. Data retention

Website skin profiles remain in your browser until you clear them. Images submitted for ingredient or cosmetic skin analysis are processed transiently and are not retained after the analysis is complete. If you create an app account, account and synced app data are retained until you delete the account or request deletion.

6. Your rights

To remove a website skin profile, clear your browser's localStorage for puremoonlight.com. App users can delete their account and associated server data from Settings → Delete account. Uninstalling the app removes locally stored app data. You may also request access to or deletion of your account data by contacting us.

7. Contact

Questions about this privacy policy: support@puremoonlight.com