Privacy

Moonbeem is an authorized fan distribution platform for media. We're operated by Moonbeem, Inc. Reach us at privacy@moonbeem.xyz.

Account data. When you create a Moonbeem account we collect your email address (from your authentication provider), the handle you choose, and any profile information you add (display name, bio, avatar, social links).

Engagement data.When you interact with content on Moonbeem (opening a fan edit, clicking through to a partner offer), we record the event. If you've granted analytics consent, we also record approximate location (country, region, and city derived from your IP address). We never collect latitude/longitude or street-level data.

Payments. If you receive creator payouts, Stripe Connect handles your bank and tax data. We never store full account numbers; we hold a reference to your Stripe Connect account ID.

Consent state.Your cookie banner choices are stored in a cookie on your device, and mirrored to our database so the choice persists across your devices when you're signed in.

To run the platform: routing, recommendations, partner reporting, creator payouts. To improve the platform: aggregate analytics tell us which surfaces work and where our audience is. To stay compliant: financial records for tax purposes.

We do not sell your data. We do not share with advertisers outside the third-party processors listed below.

We share personal information with third-party service providers who help us operate Moonbeem. These processors fall into the following categories:

• Database and authentication infrastructure
• Web hosting and content delivery
• File and media storage
• Payment processing
• Transactional email delivery
• Social media analytics
• Product analytics and error monitoring
• Rate limiting and caching infrastructure

A current list of named processors is available on request. Contact privacy@moonbeem.xyz for details.

• Engagement events (fan edit modal opens, platform clicks, geo records): 24 months from the event date
• Account data: kept as long as your account is active. When you delete your account, we remove the data we control within 30 days
• Financial records (withdrawals, transfers, tax-relevant data): 7 years, per US tax-record retention norms
• Email delivery logs: retained per Resend's policy (approximately 6 months)
• Consent state: 13 months (the cookie's max age), or until you change it

Backups may contain copies of deleted data for up to 30 days before being aged out.

You can:

• Access your data — email privacy@moonbeem.xyz from the address on your account
• Correct account fields — update your profile from the profile settings page
• Deleteyour account — email privacy@moonbeem.xyz; we remove your account and cascade-delete the data we control within 30 days. Financial records retained for tax purposes are excepted (we'll explain what stays and why)
• Opt outof analytics or session recording — use the consent banner, or open Privacy settings from the banner's “Customize” button

Manage your consent settings →

EU, UK, and Swiss visitors have additional rights under GDPR, UK-GDPR, and Swiss FADP. The rights above apply to you, plus you can object to processing or lodge a complaint with your national data-protection authority.

We use a few cookies:

• sb-* — Supabase authentication state (essential, set when you sign in)
• mb_consent — your cookie-banner choices
• Analytics and session-recording cookies — set only if you've granted the corresponding consent

Privacy settings are reachable from the consent banner's “Customize” button.

When this policy changes materially, we'll re-prompt your consent on your next visit. Minor edits update the date at the top but don't re-prompt.

privacy@moonbeem.xyz