Privacy Policy

Effective date: 13 October 2026

1. Who we are

Moonhost is an app for iPhone and iPad (iOS 17 or later) that narrates in-person Werewolf and Mafia game nights. It is published by an individual developer, referred to here as “the developer of Moonhost”, “we” or “us”. The developer of Moonhost is responsible for the choices described in this policy and can be reached at app.moonhost@proton.me.

In practice we hold almost no personal data ourselves. The app has no server of its own and no accounts. This policy explains what stays on your device, the one thing that leaves it, who receives that, and the choices you have.

2. What we do not collect

• No account: we do not ask for your name, email address, phone number or password to use the app.
• No camera, microphone, location, contacts or photos. The app does not ask for these permissions.
• No advertising and no advertising identifier. There are no ads anywhere in the app.
• No analytics, no tracking and no crash-reporting tool in the app, and no tracking across other companies’ apps or websites.
• Nothing about your games: who played, which roles were dealt, who won. We have no server to receive it.

3. What stays on your device

The app keeps the following in its private storage on your iPhone or iPad (in the app’s database and in its settings). None of it is sent to us or to anyone else:

• the player names the host types for a game;
• saved groups: lists of names, kept so the next evening starts in one tap;
• your settings: the languages, the narrator’s voice and speed, the pause between lines, the discussion time, the ambience volume, captions, house rules, the game you played last and how many games you have finished;
• whether the Moonhost Pass was bought, kept as a cached answer, and the App Store country the app last saw, so that it knows whether purchases may be offered.

Deleting the app deletes this data. Your device backups (for example iCloud Backup) may include some of it, under Apple’s terms and your device settings. If you use a share button in the app, what you share goes to the app you choose through the iOS share sheet, not to us.

4. The narrator’s voice

The narrator’s voice is recorded audio that ships inside the app. We generated it in advance with text-to-speech services from our own scripts, so no user data is involved and nothing is sent anywhere when the narrator speaks. When a recording is missing, the app uses the speech voice built into your device, which speaks on the device.

5. Purchases and RevenueCat

Moonhost is free to play. Where it is offered, the optional Moonhost Pass is bought through Apple’s App Store (see the Terms of Use). Apple processes the payment. We never see your payment card or your Apple Account details.

To know whether you own the Pass, and to restore it on a new device, the app uses the software of RevenueCat (RevenueCat, Inc., United States). RevenueCat receives:

• the purchase information that Apple provides for your App Store account: the product, the dates, the price, the country of the store and whether the subscription renewed;
• a random, anonymous app user ID that the software creates on your device. It is not derived from your name or your Apple Account;
• the device’s vendor identifier (identifierForVendor): an ID that Apple gives to each developer on each device, and that resets when all of the developer’s apps are removed from the device;
• the basic technical data that travels with any internet request: the app version, the operating system version, the device model and your IP address.

RevenueCat does not receive your name, your email address or any player name, and nothing about your games. It uses the data to confirm purchases and to keep a record of them for us, not for advertising or tracking, and does not sell it. Its own policy is at revenuecat.com/privacy.

RevenueCat acts as our service provider (processor). It processes this data only on our behalf and for the purposes described here, under its Data Processing Addendum, which forms part of its terms of service and requires it to protect the data to a standard at least equal to this policy.

The app asks RevenueCat for your purchase status each time it opens, in the background, even if you never open the purchase screen. This is part of the app everywhere, including in Ukraine and in Ukrainian, where no purchase is offered and the app is completely free.

This matches the App Privacy details of Moonhost on the App Store: Purchases → Purchase History, used for App Functionality, not linked to your identity, not used for tracking.

6. What Apple handles

Apple runs the App Store, your Apple Account, payments, subscriptions and refunds. What Apple does with your data is described in Apple’s Privacy Policy. The app also asks Apple’s StoreKit, on your device, which App Store country your account uses, to decide whether the Pass may be offered. If you have chosen in your device settings to share analytics with app developers, Apple may give us anonymous, aggregated reports; they do not identify you.

7. This website and support emails

This website is static. It sets no cookies, runs no scripts, loads nothing from other companies and has no analytics. It is hosted by Cloudflare, which, like any internet service, processes your IP address and standard request information to deliver and protect the site.

If you email us, we receive your email address and what you write, and use them only to answer you. We keep a support email for as long as needed to help you and delete it on request. Please do not send passwords or card details.

8. Service providers

We share data only with the providers below, only for the purposes described, and we never sell it.

RevenueCat processes this data only on our behalf and for the purposes described in this policy, under its Data Processing Addendum, which requires it to protect the data to a standard at least equal to this policy.

We may also disclose information if the law requires it, for example in response to a valid court order. We hold almost nothing that could be disclosed.

9. Where data is processed

RevenueCat is located in the United States, Apple and Cloudflare operate worldwide, and the developer of Moonhost may be located outside your country. When purchase data leaves the European Economic Area, the United Kingdom or Ukraine, it is protected by the safeguards that these providers describe in their own policies (for RevenueCat, including its Data Processing Addendum, see section 5), but it may be accessible to authorities in the countries where it is processed, under their laws.

10. How long data is kept

11. Purposes and legal bases

We use data only to run purchases (to check, record and restore the Moonhost Pass and to offer it only where it is sold), to keep the app and this website working and secure, and to answer your messages. We do not use data for advertising or profiling.

Where laws such as the GDPR apply, our legal bases are: the performance of our contract with you, for checking and restoring your purchase; and our legitimate interest in keeping the app and the website working and secure and in answering you. We do not ask for consent because we use only the data that the purchase check needs, and nothing beyond it.

12. Your rights

Because there are no accounts and no server of ours, nearly everything is already in your hands: the names and groups on your device can be changed or removed in the app, and deleting the app removes all of it. The rest is held by others:

• Purchase data is held by Apple and by RevenueCat. Email us at app.moonhost@proton.me to see, correct or delete it. We pass your request to RevenueCat and tell you when it is done. We hold no name or email address that would let us find you, so we may ask for the order number from your Apple receipt to locate the record.
• Apple’s data (your Apple Account, payments, subscriptions): make the request to Apple, through privacy.apple.com and Apple’s Privacy Policy.

We answer within one month and it costs nothing.

In the EU/EEA and the United Kingdom

Under the GDPR and the UK GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent where processing rests on it. You also have the right to complain to the data protection authority of the country where you live or work (in the UK, the Information Commissioner’s Office).

In Ukraine

Under the Law of Ukraine “On Personal Data Protection” you have the right to know whether and how your personal data is processed, to access it, to ask for it to be corrected or deleted, to object to its processing, and to complain to the Ukrainian Parliament Commissioner for Human Rights or to a court. Write to us as described above.

In the United States, including California

This part uses the terms of the California Consumer Privacy Act (CCPA). We give these rights whether or not the law applies to a developer of our size.

• We do not sell personal information and we do not share it for cross-context behavioural advertising. We have not done so in the past twelve months.
• Categories collected in the past twelve months, all from your device: identifiers (the random anonymous app user ID, the vendor identifier of your device and your IP address); commercial information (your purchase history); and internet or network activity (the technical data in section 5). We use them for the purposes in section 11 and disclose them only to the service providers in section 8. We collect no sensitive personal information.
• Your rights: to know what we hold, to have it deleted or corrected, and not to be treated worse for asking. You may use an authorised agent. As we hold no name or email address, we check a request against the details you give about your purchase.
• We offer no financial incentive in exchange for personal information.

Elsewhere

If you live somewhere else, the law there may give you similar rights. The same answers apply, and you can write to us at the same address.

13. Security

• There are no accounts, so there are no passwords to steal.
• What the app keeps is in its private storage on your device, under iOS data protection.
• The purchase check goes over encrypted connections (HTTPS).
• This website is static and enforces a strict content security policy: no scripts and nothing from other origins.

No system is perfectly secure. If an incident puts your information at risk, we will act promptly and tell you and the authorities where the law requires it.

14. Children

Moonhost is a party game that families can play together, and its story is a mild fantasy (“night falls, someone does not wake up”) with nothing graphic. The app does not ask anyone, children included, for a name, email address, photo or account. The only data that leaves the device is the purchase-check data described in section 5 (an anonymous ID, the vendor identifier, basic technical data and the IP address). It is not tied to a name or email address and is never used for advertising or tracking, and this is the same for every user of any age. We do not knowingly collect any other information from children. The Pass is bought with an adult’s Apple Account; Apple’s Family Sharing and Ask to Buy let a parent approve purchases. If you believe a child has sent us an email, write to us and we will delete it.

15. Changes

We will update this policy when the app or its providers change, and change the effective date at the top. If a change needs your agreement, the app will ask for it.

16. Contact

The developer of Moonhost
Email: app.moonhost@proton.me