MoonStar Studio is a one-person web design and development studio operated by Moon and based in Cambodia. Throughout this policy, "we", "us", and "our" refer to MoonStar Studio. We are the party responsible for the personal information described here.

Questions about your data can be sent to moonstarstudio.co@gmail.com.

We only collect information you choose to give us, plus a small amount of technical data needed to run the site securely.

Information you provide

• Contact form: your name, email address, phone number (optional), project type, and the message you write.
• Optional sign-in: if you choose to sign in with Google or Facebook, we receive your name and email address (and, from Google, your profile photo). You are never required to create an account to contact us.

Payment information

Payments are handled by ABA PayWay, the payment gateway of ABA Bank. When you pay, you enter your card or ABA account details on PayWay's own secure checkout, and they are processed on ABA's systems. We never see or store your full card number or bank details. For monthly care plans, PayWay gives us a secure payment token so the monthly fee can be charged; it only works for payments to MoonStar Studio.

Technical & usage data

• Basic analytics: we keep simple first-party counts of pages visited and an anonymous visitor identifier so we can understand overall traffic. We do not use Google Analytics or third-party advertising trackers.
• Security logs: our server may record IP addresses and browser information for administrative sign-ins and to protect the site from abuse.

We use the information above to:

• Reply to your enquiry and discuss your project.
• Provide and manage the services and care plans you sign up for.
• Process payments through ABA PayWay.
• Keep the website secure and improve how it works.

We keep contact-form submissions for as long as needed to serve you, and no longer than 24 months after our last contact, unless you ask us to delete them sooner. Account information (including if you signed in with Google or Facebook) is kept until you ask us to remove it. Analytics data is stored in aggregate and is not tied to your identity.

We share data only with the service providers needed to run the studio, and only as far as necessary:

• ABA PayWay (ABA Bank) — processes card and ABA payments. See ABA's own privacy policy for how they handle payment data.
• Render — hosts our website and database, so submitted information is stored on their infrastructure.
• Google and Facebook — only if you choose to sign in with one of them, in which case it shares your basic profile details with us.
• Email delivery — we use an email service to receive contact-form notifications sent to our own inbox.
• Google Firebase and Apple — deliver notifications to the MoonStar Studio app if you turn them on. They receive your phone's notification token and the short notification message, not your account details.

We do not sell your personal information, and we do not share it for advertising.

The MoonStar Studio app (Studio Hub on the web) is where our clients and team review content and organise work. There is no sign-up in the app: we create each account for the clients and team members we work with.

• Your account: your name, email address, and a password that is stored only as a secure one-way hash. A client's account is linked to their business name.
• Your work: the posts, files, comments, approvals and tasks added by you and our team, so everyone on the project can see them.
• Notifications: if you allow them, your phone gives the app a notification token through Google Firebase Cloud Messaging (and Apple's push service on iPhone). We store it with your account only to tell you about new content, replies, approvals and tasks. It is deleted when you sign out, and you can turn notifications off at any time in your phone's settings.
• Staying signed in: the app keeps you signed in for up to 30 days with the same essential session cookie the website uses.

The app has no ads, no analytics and no tracking, and it does not use your location, contacts, camera or microphone. You can ask us to delete your app account and everything linked to it at any time (see "Accessing or deleting your data" below).

We use the minimum storage needed for the site to function:

• Essential session cookie: set when needed to keep you signed in and to protect forms from abuse. It carries no advertising data.
• Consent choice: your response to our cookie notice is stored locally in your own browser so we don't ask again.

We do not use advertising or cross-site tracking cookies.

You can ask us at any time to see what personal information we hold about you, to correct it, or to delete it — including an account you created by signing in with Google or Facebook, and your MoonStar Studio app account. Email moonstarstudio.co@gmail.com with your request.

If we update this policy we will change the "last updated" date at the top of this page. For anything you're unsure about, just reach out — we're happy to explain in plain language.