Privacy

Privacy Policy

Effective May 21, 2026

This Privacy Policy describes how Lunar Web Studio LLC (“Lunar Web Studio,” “we,” “us,” or “our”), the operator of Gematria.Today (the “Site”), collects, uses, discloses, and protects information about visitors, registered members, premium members, and authorized administrators.

Who we are

Lunar Web Studio LLC is a Texas limited liability company located at 5900 Balcones Drive, Suite 100, Austin, TX 78731. We are the data controller for personal information processed through the Site. For EU/UK individuals, you can reach us at the contact details below; we have not appointed an Article 27 representative because we do not regularly process EU/UK personal data at the scale that triggers that requirement.

Scope

This policy applies to personal information we collect through the Site, including public pages, calculators, the blog, the forum, member dashboards, AI-assisted features (such as SiteSeeker search and GemaBot guidance), administrative tooling, and any related services we make available. It does not apply to third-party websites or services we link to, which have their own privacy practices.

Information we collect

We collect information in three ways: information you give us, information collected automatically when you use the Site, and information we receive from third parties.

Information you give us

• Account information for members and administrators, such as username or display name, email address, hashed password, profile preferences, and role.
• Forum and community content, including posts, replies, reactions, reputation activity, and reports you submit.
• Calculator and lookup inputs you submit to gematria calculators, name calculators, related-word tools, and definition lookups.
• AI prompts and feedback you submit to SiteSeeker, GemaBot, or other AI agents, including optional corrections or guidance that premium members choose to save for shared use.
• Saved research, such as calculations, notes, or items you add to your dashboard.
• Contact and support messages you send through forms or by email.
• Payment and billing information if you purchase premium features. Payments are processed by Stripe, Inc.; payment-card details are submitted directly to Stripe and are not stored on our servers. We receive limited billing metadata from Stripe such as your name, email, country, the last four digits of the card, the card brand, and subscription status.

Information collected automatically

• Technical and request data, including IP address, user-agent string, referrer, language, timestamps, and request paths, captured by our hosting and serverless infrastructure for security, debugging, and analytics.
• Cookies and similar technologies, including authentication cookies, a consent-state value stored in localStorage, and Google Analytics identifiers (described in detail below).
• Analytics events generated by Google Analytics (measurement ID G-E611H84D6Y), such as pageviews, navigation events, device and approximate-location signals, and engagement timing.
• Conversion and engagement tracking generated by our own scripts (such as conversion-tracking.js) for actions like sign-ups, premium upgrades, and key feature clicks. Administrators may review aggregated click data through internal tooling.
• Service worker and PWA data, including cached resources stored in your browser to enable offline support.

Information from third parties

• Billing status and event notifications from Stripe.
• Reference content from dictionary APIs (such as Wordnik) and other reference services. This typically does not include personal information about you.
• Diagnostic and abuse signals from infrastructure providers such as Netlify.

How we use information

• To create, authenticate, and protect member, premium, and administrator accounts.
• To operate the calculators, glossary, blog, forum, dashboards, and admin tooling.
• To process payments, manage subscriptions, send transactional messages (receipts, renewal notices, password resets, security alerts), and handle refunds or billing issues.
• To respond to calculator, related-word, and definition requests, and to deliver AI Feature outputs.
• To improve AI response quality for similar prompts, including by applying shared guidance that members choose to save.
• To monitor reliability, debug failures, and analyze how the Site is used in the aggregate.
• To investigate abuse, fraud, unauthorized access, or violations of our Terms of Use.
• To send service announcements, and, with your consent where required, marketing messages you can unsubscribe from at any time.
• To comply with legal obligations and to enforce or defend legal rights.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects. We do not use your calculator inputs, prompts, or content to train third-party foundation models.

Legal bases (EU/UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the following legal bases under the GDPR and UK GDPR:

• Contract — to create and operate your account, provide premium features, and respond to your requests.
• Legitimate interests — to secure the Site, prevent abuse, debug, analyze aggregate usage, and improve our features, balanced against your rights and expectations.
• Consent — for non-essential cookies and analytics in regions where consent is required, and for any optional marketing communications. You can withdraw consent at any time.
• Legal obligation — to comply with applicable laws, tax requirements, and lawful requests from authorities.

Cookies, analytics, and tracking

We use cookies and similar technologies for the following purposes:

• Strictly necessary — authentication. Members and administrators who sign in receive a secure session cookie (such as gematria_admin_session) used only for authentication and session continuity. Authentication cookies are configured as HttpOnly, Secure, and SameSite=Lax.
• Strictly necessary — preferences and consent. We store a consent-state value in your browser’s localStorage (key gematria_cookie_consent) so that we remember your cookie choice and so that we apply the correct Google Analytics consent mode.
• Analytics. We use Google Analytics 4 (measurement ID G-E611H84D6Y) to understand how visitors discover and use the Site. Google Analytics sets cookies (such as _ga and _ga_*) and collects information described in Google’s Privacy Policy. For visitors detected in the EEA, the UK, and other regions that require it, we run Google Consent Mode v2 in default-denied state and only enable analytics, advertising, and personalization signals after you accept. Visitors in other regions are tracked by default unless they opt out using the controls on the Site.
• Conversion and feature analytics. Our own scripts record events such as account sign-up, premium upgrade, and key feature clicks for product analytics and abuse detection.

You can control cookies through your browser settings and through any consent prompt we display. Browser-level blocking of strictly necessary cookies may break sign-in, premium features, or the consent prompt itself.

You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as described below:

• Service providers and sub-processors who process information on our behalf, under contracts that restrict their use of the information (see list below).
• Other users, when you choose to post or share content publicly — for example, your display name, avatar, reputation, and forum posts will be visible to others.
• Legal, safety, and enforcement — when we believe disclosure is required by law, court order, or government request, or is necessary to protect the rights, property, or safety of Lunar Web Studio LLC, our users, or the public, including to investigate fraud or abuse.
• Business transfers — if we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections.
• With your consent — for any other purpose disclosed at the time we collect the information.

Service providers and sub-processors

Categories of providers we currently rely on include:

• Hosting and serverless infrastructure — Netlify.
• Database — Neon.
• Payments and subscription billing — Stripe, Inc.
• Analytics and consent — Google (Google Analytics 4, Google Consent Mode).
• Content delivery and front-end assets — jsDelivr, Bootstrap CDN, and similar CDNs that serve our static assets.
• Reference and dictionary APIs — Wordnik and similar providers used by glossary and related-word features.
• AI model providers — large-language-model providers that power SiteSeeker and GemaBot. Prompts you submit may be sent to those providers under contractual restrictions on use and retention.

Each provider has its own privacy policy. We update this list as our processors change.

International data transfers

We are located in the United States, and most of our service providers process information in the United States or other countries. When we transfer personal data from the EEA, the UK, or Switzerland to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, as offered by the relevant provider. You can request more information about the safeguards used by contacting us.

Retention

We retain personal information for as long as needed to provide the Site, comply with our legal obligations, resolve disputes, and enforce our agreements. In particular:

• Account records are retained while your account is active and for a reasonable period after closure (typically up to 24 months) for fraud and abuse prevention.
• Session records expire automatically based on system settings.
• Forum posts and other public content may remain visible after your account is closed if they are part of a broader discussion; you can request removal by contacting us.
• Billing and tax records are retained as required by law, generally seven years.
• Analytics data is retained according to the settings we configure in Google Analytics (currently the platform’s default).
• Server logs are retained for a short window (typically 30–90 days) and then aggregated or deleted.

When personal information is no longer needed, we delete or de-identify it.

Security

We use organizational and technical safeguards designed to protect personal information, including hashed passwords, secure cookies, encrypted transport (HTTPS), least-privilege access to administrative tooling, and server-side validation. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

Your choices and rights

Depending on where you live, you may have the following rights with respect to personal information we control:

• Access a copy of your personal information.
• Correct inaccurate or incomplete information.
• Delete personal information, subject to legal and operational exceptions.
• Port certain information to another service in a structured, machine-readable format.
• Restrict or object to processing in certain circumstances.
• Withdraw consent where we rely on consent.
• Opt out of marketing emails using the unsubscribe link or by contacting us.
• Lodge a complaint with your local data protection authority.

To exercise these rights, email support@lunarwebstudio.com. We may need to verify your identity before responding. We will respond within the time required by applicable law.

California privacy notice

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you specific rights, including the right to know what personal information we have collected, the right to delete it, the right to correct it, the right to limit our use of sensitive personal information, and the right to opt out of “sale” or “sharing” for cross-context behavioral advertising.

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising. The categories of personal information we collect are described under “Information we collect” above. We retain each category for the periods described under “Retention.”

To exercise your California rights, contact us at support@lunarwebstudio.com. We will not discriminate against you for exercising your rights. Authorized agents may submit requests on your behalf with proof of authority.

Children’s privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it. For users between 13 and the age of majority in their jurisdiction, parental or guardian involvement is required.

Do Not Track and Global Privacy Control

The Site does not currently respond to browser “Do Not Track” signals. For visitors subject to laws that recognize the Global Privacy Control (GPC), we will treat a GPC signal as a valid opt-out of any “sale” or “sharing” under those laws.