Privacy Policy

Effective Date: March 1, 2026 Last Updated: March 1, 2026 Website: magicandvanillacake.fun

1. Introduction

This Privacy Policy describes how Luna & Nova (“we,” “us,” or “our”) collects, uses, stores, and protects the personal information of visitors and registered members of magicandvanillacake.fun (the “Platform”). This Policy applies to all users of the Platform, including public visitors and registered members who have been granted access to observe the Luna & Nova research experience.

We are committed to protecting your privacy in accordance with applicable data protection laws, including the California Consumer Privacy Act (CCPA), other applicable United States privacy regulations, and the General Data Protection Regulation (GDPR) of the European Union.

By accessing or using this Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

2. Information We Collect

We collect only the minimum personal information necessary to operate the Platform and manage member access. Specifically, we collect the following:

a) Email Address Your email address is collected at the time of registration and is used solely to verify your identity, grant access to the Platform, and communicate essential account-related information.

b) Username Upon registration, a username is created or converted from the information you provide. This username is used to identify your account within the Platform and is not publicly displayed to other users.

c) Password Your password is collected and stored in encrypted form using industry-standard security protocols. We do not store passwords in plain text. We do not have access to your password in its original form.

d) Usage Data We may collect non-personally identifiable usage data, including pages visited, time spent on the Platform, and general interaction patterns, for the purposes of research analysis and Platform improvement. This data is aggregated and anonymized.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your member account
• To verify your identity and authenticate your access to the Platform
• To communicate with you regarding your account, including access confirmations and essential notices
• To support the longitudinal research objectives of the Luna & Nova project in an anonymized and aggregated form
• To maintain the security and integrity of the Platform
• To comply with applicable legal obligations

We do not use your personal information for marketing purposes. We do not send newsletters, promotional emails, or any unsolicited communications.

4. Legal Basis for Processing (GDPR)

For users located in the European Union, we process your personal data on the following legal bases under the GDPR:

• Contract Performance: Processing your email address, username, and password is necessary to fulfill our agreement to provide you with access to the Platform.
• Legitimate Interests: We process usage data based on our legitimate interest in conducting longitudinal research and improving the Platform, provided this does not override your fundamental rights and freedoms.
• Legal Obligation: We may process your data where required to comply with applicable law.

5. Data Retention

We retain your personal information for as long as your account remains active or as necessary to fulfill the purposes described in this Policy. If you request deletion of your account, we will delete or anonymize your personal data within 30 days of receiving your request, except where retention is required by law.

Anonymized and aggregated research data, which cannot be used to identify you, may be retained indefinitely for scientific and research purposes.

6. Data Sharing and Disclosure

We do not sell, rent, trade, or otherwise transfer your personal information to third parties. We do not share your data with advertisers or marketing platforms.

We may disclose your information only in the following limited circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist in operating the Platform (such as hosting providers), subject to strict confidentiality obligations.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority.
• Protection of Rights: We may disclose information where necessary to protect the rights, property, or safety of the Platform, its users, or the public.

7. Data Security

We implement reasonable and appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted password storage, secure server infrastructure, and restricted access to personal data.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

For all users:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information
• The right to withdraw consent at any time where processing is based on consent

For EU users (GDPR):

• The right to data portability
• The right to restrict or object to processing
• The right to lodge a complaint with your local data protection authority

For California users (CCPA):

• The right to know what personal information is collected and how it is used
• The right to request deletion of personal information
• The right not to be discriminated against for exercising your privacy rights

To exercise any of these rights, please contact us using the information provided in Section 11.

9. Cookies

This Platform may use essential cookies necessary for the operation of the member login system and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies that collect personally identifiable information.

10. Children’s Privacy

This Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will take steps to delete such information.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at:

Luna & Nova Research Project Website: magicandvanillacake.fun Email: [Your Contact Email]

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

This Privacy Policy was prepared for informational purposes and reflects the data practices of the Magic & Vanilla Cake Platform as of the effective date above. It does not constitute legal advice. For specific legal guidance, consult a qualified attorney.