Privacy Policy

The short version

We collect as little as we can, only what each app needs to work.
We never sell your information, and we don't share it for advertising.
There are no ads and no third-party tracking in our apps or on this website.
You can ask us to delete your information at any time by emailing hello@moonshiftstudio.com.

Moonshift Studio ("we", "us") is an independent studio that makes apps and games. Questions about this policy go to hello@moonshiftstudio.com.

This website

moonshiftstudio.com does not use cookies, ads, analytics or tracking scripts, and it doesn't ask for personal information unless you choose to join the testers list.

Server logs. Our hosting provider, Vercel, automatically keeps standard technical logs, such as IP address, browser type and the page requested, to deliver the site and keep it secure.
Fonts. The site's fonts load from Google Fonts, so your browser connects to Google when a page opens. Google's privacy policy covers that connection.
QR codes. When you scan a Moonshift QR code, the page checks whether you're on an iPhone or an Android phone so it can open the right app store. That check happens on your phone and nothing is saved.
Playing Firefly Dash on the site. The game only loads after you tap Play. Once it loads, the Firefly Dash section below applies.

The testers list

If you join the testers list, we save the email address you enter, the apps you pick, your phone type (iPhone, Android or both), whether you want test invites or launch news, and the date you signed up.

We use it only to send test invites and launch news for the apps you picked. We don't add you to any other list, and we never sell it or share it for marketing. To be removed, email hello@moonshiftstudio.com and we'll delete your entry.

Firefly Dash

Firefly Dash has no accounts and never asks for your name, email or any other personal information.

Your progress (best score, sparks, upgrades and settings) is saved on your own device, in your browser's storage. It isn't sent to us.
Anonymous game stats. To see how the game is played and fix problems, the game sends us anonymous events: when the game opens, when a run ends (distance, score and world reached), and when you use a power-up, revive, buy, unlock or equip something in the game. Each event includes the game version, your device type (iPhone, Android or other) and a random ID made on your device. That ID isn't linked to your name, email or any account.
Purchases in Firefly Dash use in-game sparks and moonstones only. There are no real-money purchases in the web version.

To reset your anonymous ID and saved progress, clear the site data for fireflydash.moonshiftstudio.com in your browser settings.

Manatable

Manatable is in testing. This section describes what the test version does, and we'll update it before launch if anything changes.

Account. You sign in with your email address and a one-time code we email you. We use your email only for signing in and for messages about the app.
Your collection and games. When you're signed in, your card collection, decks, finished games, the player names you type in, and your settings are saved to your account so they sync across your devices.
Card scanner. The camera is used only while you're scanning. Cards are read on your phone, and camera images aren't uploaded or saved by us.
Card information and prices come from Scryfall, a public Magic: The Gathering card database. To look up a card, the app sends Scryfall the card's name or set and number, not your personal information.
Price alerts and notifications. If you set a price alert and turn on notifications, we save the alert and a notification address for your device so we can tell you when a price moves. Turning off notifications removes it.
Shared lists. If you share a card list, anyone with the link can see that list and the name you chose to show on it. You can stop sharing at any time.

Manatable isn't affiliated with, approved or endorsed by Wizards of the Coast.

Unbadged

Unbadged is an invite-only beta for adults 18 and older. It's built so you can talk about work without your name attached.

We keep	We never ask for
Your username, avatar and settings	Your real name
Your posts, comments, photos and messages	Your email address or phone number
Pay Check entries, stored without your username	Your location or store number
Your 18+ confirmation	Your contacts or browsing history
Reports and feedback you send	Payment details

Photos. Faces in public photos are blurred automatically before anyone else sees them.
Messages aren't end-to-end encrypted during the beta. We can technically see private messages and group chats, and we only look when investigating a report or when the law requires it.
Reports are anonymous. The person you report isn't told who reported them.
Deleting your account deletes your posts and messages. Copies in backups are gone within 30 days.

The Unbadged beta terms inside the app explain the community rules in full.

Nopehook

Nopehook is in development. This section describes how it's being designed, and we'll publish the full details here before it launches.

Messages you check. When you paste a text, link or screenshot, or forward an email, Nopehook analyzes it to give you a verdict. That includes sending it to an AI service for review. We use what you send only to check it for you and to keep your check history.
Your check history stays in your account so you can look back at past results, and you can delete it at any time.
Family protection. If you invite family members, they'll know they're connected to you. If you've turned alerts on, you'll get an alert when one of them runs into a likely scam.
Subscriptions to Nopehook Plus are handled by the App Store or Google Play. We never see your card details.
We don't use the messages you check to advertise to you, and we never sell them.

Services we use

A few companies help us run the apps and this website. They handle data only to provide their service to us.

Vercel hosts this website and our web apps.
Supabase stores app data: accounts, saved data, game stats and the testers list.
Google Fonts serves the fonts on this website.
Scryfall provides card data and prices in Manatable.
Apple and Google handle app downloads and any in-app payments once our apps are in their stores.
An AI service will review the messages you check in Nopehook. We'll name it here before Nopehook launches.

We don't sell personal information and we don't share it for targeted advertising. We share information only:

with the service providers listed above, to run the apps
when you choose to share it, for example a public post in Unbadged or a shared list in Manatable
when the law requires it, such as a valid court order. When the law allows, we'll tell you first.
to protect someone's safety. Child exploitation is always reported, as the law requires.

How long we keep it

We keep information only as long as we need it to run the app it belongs to. When you delete your account or ask us to delete your information, we remove it, and copies in backups are gone within 30 days. Anonymous game stats from Firefly Dash aren't linked to you and are kept to understand how the game is played.

Children

Unbadged is only for adults 18 and older. Our other apps are made for a general audience and aren't directed at children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, email hello@moonshiftstudio.com and we'll delete it.

Your choices and rights

Wherever you live, you can ask us to:

tell you what information we have about you
give you a copy of it
correct it
delete it

Email hello@moonshiftstudio.com from the address you used with us, or tell us your app username, and we'll answer within 30 days. We won't treat you differently for asking. Some laws, such as those in California and the EU, give you these rights by law. We offer them to everyone.

Security

Data is encrypted in transit (https) and stored with providers that encrypt it at rest. Access to app data is limited to what each app needs, and only the studio can open the databases. No system is perfectly secure, so we keep what we collect small.

Changes to this policy

When we change this policy, we'll update the date at the top of this page. If a change affects how we use information you've already given us, we'll tell you in the app or by email before it takes effect.

Contact

Moonshift Studio
hello@moonshiftstudio.com

Unbadged safety reports: reports@unbadged.app
Nopehook support: support@nopehook.com