Privacy Policy
MoonLight-Panda! · Updated: 3 November 2026
1. Who processes your data
The personal data controller is Ukrainian sole proprietor (FOP) Левченко Євген Валерійович, Ukraine. For data enquiries: Contact us. Full business details appear in the MoonLight-Panda! Terms of Use. This policy covers the website and enquiries through the project's official channels.
2. Data we need
We process email, name or nickname, profile details, language preferences, orders, access levels and periods, support messages and payment references you provide. Servers may log IP addresses, times, requested URLs, browser details and security events. The 18+ confirmation is a user declaration: clicking a button does not verify a passport or establish actual age. Do not send passwords, private keys, seed phrases or full payment card details. When you register or arrange payment, we record when you accepted the Terms of Use, your 18+ declaration, language and the version of the relevant documents to document the contract, perform it and protect the parties’ rights. The contact form processes an optional nickname, reply email, topic, message, language and consent to handle the enquiry. Messages are stored in a protected WordPress/Elementor area accessible to authorized administrators; technical data may be used for spam prevention. For logged-in users, the contact form prefills the profile nickname and email; both can be edited before sending.
3. Pseudonyms and personal safety
When registering or using the website, its resources and official MoonLight-Panda! channels, we recommend a pseudonym and a separate email address that is not linked to your public identity. Avoid providing your real name, home or work address, telephone number, location, main social profiles or other identifying information unless necessary. Do not expose such details in comments, messages, filenames or attachments; check screenshots and metadata before sharing.
Take particular care where privacy, freedom of expression, beliefs or worldview lack adequate protection, including where authoritarian or tyrannical practices occur. Measures presented as counter-terrorism or child protection may also create privacy risks when used for disproportionate surveillance, censorship or persecution. Assess the risks of revealing your identity and take care of your digital safety.
Use a unique password and a secure email account. This recommendation does not guarantee anonymity: IP addresses, logs, payment information, blockchain records and third-party services may enable identification. Your account requires a working email address you can access; it does not have to contain your name. Where law or a payment provider requires accurate identity or payment information, provide it to the appropriate recipient through its secure channel. This advice does not encourage false information where accurate details are required.
4. Purposes and legal bases
Data supports account creation and security, order fulfilment, manual payment reconciliation, access delivery, support, abuse prevention, record keeping and compliance. Legal bases include entering into and performing a contract, legal obligations and legitimate interests balanced against your rights; optional analytics rely on a separate choice or consent. Accepting the terms is not consent to every processing activity.
5. Providers and international transfers
The site uses WordPress, Paid Memberships Pro payment records, hosting and technical services. Recipient categories include hosting and infrastructure providers, payment and email services, technical support and, with separate permission, analytics services. Analytics may include visits, navigation, click statistics and interaction recording. Interaction recording is disabled on legal pages. Depending on the provider, processing may occur outside Ukraine and your country, subject to applicable international-transfer requirements. Optional analytics does not load before permission. We do not sell data; engaged providers receive necessary access and authorised bodies receive data where lawfully required. Contact us for information about the actual recipients of your data and international transfers. External services you independently open operate under their own policies.
6. Payments and blockchain
We do not receive your payment account password or wallet private keys. Transaction information may be retained for reconciliation, accounting and disputes. Public blockchain records are outside our control and cannot be deleted by us; wallet addresses and transaction IDs may be linkable to a person.
7. Notifications, Telegram and community data
Personal web push and Telegram notifications are optional and disabled until you separately choose them in your account. We store followed games, channels, language, SFW/NSFW mode, consent time and preferences. Web push stores a browser subscription endpoint and delivery keys linked to your account. Messages travel through your browser’s push provider (including Google, Mozilla or Apple), which may receive connection metadata; web-push payloads are encrypted. Connecting Telegram after Start links a private chat identifier to your account; Telegram processes messages and technical data under its own policies, potentially outside Ukraine.
SFW is the initial mode: no game title, version, translation languages or our logo. NSFW requires a separate choice and adult confirmation and includes game details. Your browser or Telegram may show the domain, bot name or avatar even in SFW. Other people who can see your screen may see notifications.
Change preferences in your account. Disabling web push removes linked delivery endpoints from our site; also revoke browser permission or the local subscription in browser settings or with the disconnect button. Disabling Telegram or sending /stop removes the chat link and stops personal notifications. Followed games are managed separately. Reputation and earned achievement data support community features; currently they are displayed in your own account, with no automatic earning rules introduced yet. The account inbox retains the latest 50 events; other retention periods are explained below. For requests about this data: Contact us.
8. Private conversations
Private messages are for communicating with the team and game authors approved by an administrator. We store participants, subject, text, dates and read status to deliver messages, display history and prevent abuse. Participants can view their conversations; authorized administrators with technical site access may access them for maintenance, complaints or legal requirements. This is not an end-to-end encrypted system.
History is stored in the site database while needed for communication, support or protection of rights. Removing a conversation from your inbox does not automatically remove the other participant’s copy. Request access, erasure or correction using Contact us. Do not send sensitive information, passwords, identity documents or payment details. New private-message alerts through web push and Telegram are disabled until you separately enable this category and the relevant channel in your account. SFW is the default: a generic notice without sender, text or our logo. In NSFW, alerts include the sender’s public nickname, up to 160 characters of text and the logo. These details are shared with the selected delivery services and may appear on a lock screen or remain in Telegram; this also applies to messages you send when the recipient enables such alerts. Your browser or Telegram may independently show the domain or bot profile even in SFW. You can change or withdraw your choices in your account; this does not remove alerts already delivered. Messages read, deleted or blocked before dispatch do not trigger delivery. Private messages are never posted in the Telegram group; email forwarding stays disabled.
For spam prevention, only the last ten successful-send timestamps are stored, without additional copies of message text. The interval depends on the active membership tier or approved author status and applies across all your conversations and replies together.
9. Retention and security
Account data is retained while needed for access, support or handling enquiries. Following account deletion, information no longer needed is deleted or anonymised. Accounting records, evidence of lawful transactions and dispute records are retained for periods required by law or necessary to establish or defend rights; these cannot always be deleted with an account. Technical logs and backups have separate retention cycles. Access controls and technical safeguards are used, but absolute security is not guaranteed.
10. Your rights
You may request information, access, correction, deletion or restriction of processing, object to processing and withdraw consent; further rights, including portability, apply where provided by applicable law. Withdrawal does not invalidate earlier lawful processing. For enquiries, use Contact us and identify your account email; proportionate identity verification may be requested. You may complain to the Ukrainian Parliament Commissioner for Human Rights or the competent data protection authority in your jurisdiction. Deleting data needed for a contract may prevent further service, without removing mandatory rights.
11. Cookies, children and changes
See the separate Cookie Policy. The site is for adults; if an underage account is identified, access may be restricted and unnecessary data deleted subject to legal obligations. Material changes are notified through the site or email where legally required; publishing an updated text alone does not authorise a new purpose requiring consent.
12. Moderation data and achievements
To protect conversations from spoilers and review appeals, we store the confirmed-violation counter, the last violation date, mute expiry or permanent status, earned achievements, and up to 50 recent decisions with timestamps, moderator IDs and a short reason/reference. The full conversation text is not copied into this log. Reasons and internal records are available to authorized administrators and moderators; users see their own counter, restrictions and achievements in their account. Achievements remain after the counter resets or the mute expires for the lifetime of the profile. Restriction data is kept while needed to enforce rules, review appeals or protect rights. Request access, correction or lawful erasure through Contact us.