Privacy policy.

The Lunara Edit (“we”, “us”) is published by Lunara LLC at www.lunaraedit.com. This policy explains what happens to information when you visit.

What we collect directly

Only what you choose to give us. There are no site accounts or contact forms. If article conversations are enabled, you may also leave a moderated public comment or reply.

The email lists. If you sign up for free printables — on the freebies page or in the popup — we collect your email address and, if you give it, your first name. We use them to send the printables you asked for and occasional emails about printables, articles, and products for the topics you choose. We also store your topic choices, signup source, confirmation time, and the version of the signup consent language. We never sell your address or share it for unrelated marketing. Sender processes it to provide the email service described below.

The lists are run by Sender (opens in a new tab), which stores your details and sends the emails on our behalf. Sender records whether emails are delivered and opened and which links are clicked; that is standard for email services and is covered by Sender’s own privacy policy. Marketing emails include an unsubscribe link. Unsubscribing stops future marketing emails; it does not necessarily erase the stored subscription record.

We use short-lived hashed email and IP values to limit repeated signup requests. These stay in server memory and are not sent to analytics.

Email. If you email us, we hold your message and your email address for as long as it takes to deal with it. Writing to us does not add you to the list.

Article conversations

On articles with conversations enabled, you can share a display name and a comment or reply without creating an account or entering an email address. We review submissions before publishing them. Approved comments, display names, dates, and the number of hearts are visible to anyone reading that article. Please do not share children's names, private medical details, addresses, or other identifying information in a public comment.

To help limit repeated submissions and let you heart or unheart a comment, we place a first-party, HTTP-only browser cookie containing a random identifier. Our server converts that identifier to a one-way hashed value before storing it with a submission or heart in our Neon Postgres database. Neon processes the comments and reactions for us. We do not use this identifier for advertising or analytics, and comments do not subscribe you to email. Removing browser cookies will reset your hearts; it will not automatically delete an existing comment. Comments awaiting moderation remain nonpublic.

When you submit a comment or reply, we send a private moderation notification to the site owner at hello@lunaraedit.com. It includes the article title, your chosen display name, and the text you submitted. We use Sender (opens in a new tab) to deliver that notification; receiving or leaving a comment does not add anyone to our marketing lists. The notification is not publicly posted.

We can hide or remove comments, including replies, when needed for privacy, safety, spam control, or moderation. You can contact us to request correction or removal of a comment. Submissions that are declined may be retained temporarily for abuse prevention and administrative review.

The private moderator dashboard uses Neon Auth for the site owner’s sign-in, not for reader accounts. Moderation sessions are held in secure, HTTP-only browser cookies. We do not publish the owner’s authentication details or allow visitors to approve their own comments.

Analytics

Optional analytics help us understand page visits, downloads, referring sites, and page-loading performance. They remain off until you choose “Allow analytics.” Declining does not affect browsing, downloads, or the email list.

• Vercel Web Analytics (opens in a new tab) counts page views, download clicks, product and checkout clicks, signup requests, and outbound or affiliate link clicks without analytics cookies. Events can include the referring platform, campaign, page, and button placement. We do not send your email address, worksheet answers, or other form content in these events.
• Metricool (opens in a new tab) loads a small tracking script that records page visits and referring sites, which we use alongside our social media scheduling. It may set its own cookie or similar identifier to tell a returning visit from a new one.
• Vercel Speed Insights (opens in a new tab) measures page-loading and interaction performance, with information about the page, browser, and device. It does not use tracking cookies.
• PostHog (opens in a new tab) helps us compare visits, downloads, signup requests, product views, and checkout clicks. It uses a random browser identifier stored in a cookie and local storage to connect actions and recognize a returning browser. The cookie lasts up to one year; clearing this site's browser data removes the saved identifier. Events include fixed resource labels, referring platforms and campaigns, and basic browser and device information. We do not send email addresses, names, comments, worksheet answers, or free-text searches to PostHog, and we remove private URL parameters and gift-link tokens from event data. Session recording, automatic click capture, surveys, and person profiles are disabled. The analytics project is hosted in PostHog's US region.
• Google Analytics (opens in a new tab) helps us understand page visits and where readers arrive from. It uses first-party cookies to recognize a browser and includes campaign labels and basic browser and device information. We remove private URL parameters and gift-link tokens from the page addresses we send, and reduce an external referring address to its website origin. We do not send names, email addresses, comments, worksheet answers, or search terms. Google advertising signals and ad personalization are disabled.

Privacy choices lets you change your choice at any time. Withdrawing permission reloads the page to stop already-loaded analytics. We also keep optional analytics off when your browser sends a Global Privacy Control signal. This prevents future analytics collection; it does not erase data already held by a provider or necessarily remove identifiers that provider previously stored.

If you allow analytics, we remember the referring platform and campaign for up to 30 minutes in this browser tab. Those labels can accompany a Polar checkout or your confirmed email signup so we can see which links bring readers to a purchase or subscription. We remove the saved labels when you decline analytics. Declining does not prevent either action.

We do not use advertising pixels or use analytics to follow you around the web to show you ads.

Stored in your browser

We store your analytics choice in your browser’s local storage. If you dismiss the printables popup or sign up, we also remember those preferences there so the popup can stay out of your way. The popup’s page count stays in memory for the current visit. These preferences are not sent to analytics. If article conversations are enabled, we also use a first-party HTTP-only cookie for comment rate limits and hearts; it is separate from analytics consent. Clearing this site’s browser data removes the saved choices; you can also change the analytics choice through the footer.

For visitors who allow analytics, the short-lived source and campaign labels use session storage. PostHog also uses a cookie and local storage for its random browser identifier and session information. Google Analytics uses first-party analytics cookies. Site checks can save an analytics exclusion preference in local storage.

Hosting and server logs

The site is hosted by Vercel (opens in a new tab). Like essentially every web host, Vercel records standard request information — IP address, browser user agent, the page requested, and a timestamp — to serve the site, keep it up, and defend it against abuse. That data is handled under Vercel’s own privacy policy. We do not use it to build any profile of you.

Images on this site

The images displayed on this site are served from our own domain. Loading them does not send a separate image request to Unsplash or another third-party image host.

Affiliate links

Some outbound links are affiliate links. If you click one, the retailer or its affiliate network may set a cookie in your browser so a resulting purchase can be credited to us. That happens on their domain, under their privacy policy, and only if you click. Retailer reports may show ordered product names, quantities, and commissions, without identifying the individual purchaser to us. These affiliate reports do not give us your payment-card details, shipping address, or individual purchasing identity.

The programs involved are Amazon Associates (see the Amazon privacy notice (opens in a new tab)) and Impact (see the Impact privacy policy (opens in a new tab)). Full details of the commercial relationship are on the affiliate disclosure page.

Purchases and digital downloads

If you purchase a Lunara product, the platform named beside the purchase button handles checkout under its own privacy policy. Etsy purchases use Etsy. A purchase option identified as Polar takes you to its hosted checkout, where it collects the contact, billing, and payment information needed to process the purchase, calculate applicable tax, and provide the download and receipt.

We do not collect payment-card details on this website or load a Polar checkout script while you browse. See Polar’s privacy policy (opens in a new tab) for its handling of checkout information.

The selling platform may give us the order information needed for fulfillment, support, and business records, such as your platform username, order reference, purchased product, and contact information. We do not add buyers to the email list without a separate signup. We retain transaction records as needed for accounting and applicable legal requirements.

Links to other sites

Where we link out — to Instagram, to a retailer, to an app — that site’s own privacy policy takes over the moment you arrive. We have no control over and take no responsibility for how other sites handle your data.

Children

This site is written for adults, largely parents. Some printables are made for children to use, but the email list and public article conversations are for adults. They are not directed at children under 13, and we do not knowingly collect information from children. If you believe a child has signed up or posted a comment, email us and we will review and delete their details.

Your rights

Depending on where you live — the EU or UK under the GDPR, California under the CCPA, and a growing number of other places — you have the right to ask what personal data an organization holds about you, to have it corrected, and to have it deleted.

Requests may concern your subscription, public comments, correspondence, purchase support, or other records held by us. Provider-held analytics and transaction data are subject to the provider’s retention and our available account controls. Some records may need to be retained for legal or accounting obligations. Write to hello@lunaraedit.com and we will tell you what we have and handle a deletion request subject to those obligations. You may also ask to correct your details or stop marketing. We do not sell personal information.

Changes to this policy

If this policy changes, the “last updated” date at the top changes with it. Material changes — adding analytics, a mailing list, or comments — will be described here rather than quietly folded in.

Contact

Questions about any of this go to hello@lunaraedit.com, or via the contact page.