How your information is used.

Information used to provide the service

• Account and profile: your email, username, display name, timezone, optional avatar, and account settings. Password accounts store a password hash. If you choose Google sign-in, Google and Firebase handle sign-in and provide the identity information needed to connect your account.
• Flights and progress: routes, cabin membership, join and leave times, online presence, focus sessions, tasks, saved statistics, and achievements.
• Social activity: messages and shared media, reactions, friendships, invitations, notification status, blocks, and reports you submit.
• Technical information: requests, timestamps, network and device information such as IP addresses and browser details may be processed by the application, hosting infrastructure, and services your browser connects to for delivery, troubleshooting, and abuse prevention.

Air Lune uses account and session information to run the features you request. Security and operational information helps protect accounts and keep the service working. Where applicable data-protection law requires a legal basis, these purposes rely on providing the service and legitimate interests in operating and securing it. Optional advertising processing relies on consent where required.

Guest flights

Guest mode creates a random browser cookie and a temporary seat associated with an automated flight. The database stores a hash of the guest credential, the flight ID, and the seat expiry. It does not create an account, profile, saved focus hours, or achievements.

A guest seat expires after two minutes without a heartbeat and is removed by recurring-flight maintenance. Choosing Leave guest flight releases it immediately. Guest mode still involves ordinary network requests and third-party map and advertising services; it is not a promise of anonymous browsing.

What other people can see

Public flights appear in discovery. Signed-in passengers can see cabin participants and the profile details exposed by the app, including names, avatars, and progress. Cabin chat and shared tasks are visible to the people with access to that cabin. Direct conversations are available to their participants; reported messages may be reviewed by an administrator.

A private cabin controls how people join. Someone who receives its link or boarding code may share it further. Avoid putting sensitive information in titles, tasks, messages, or your public profile. Guest flight responses contain route and timing information and do not expose passenger identities or conversations.

Services involved in running Air Lune

• Hosting and storage: AWS infrastructure supports hosting, stored application data, uploaded files, and backups.
• Google and Firebase: used when you choose Google sign-in. See Google’s Privacy Policy.
• Map providers: the default map requests satellite imagery from EOX and map data from OpenFreeMap. Those requests reveal your IP address and the map areas requested, such as the flight route. See EOX’s privacy information and OpenFreeMap’s privacy information.
• GIF and media providers: using GIF search can send search terms and technical request information to KLIPY. Displaying external media makes requests to the media host. See KLIPY’s Privacy Policy.
• Voice: when available and when you choose to join, voice infrastructure processes real-time audio and connection information. Your browser asks for microphone permission before transmitting microphone audio.

These services process information under their own terms and applicable arrangements. Depending on the provider and feature, processing may take place outside your country, including in countries with different data-protection rules. Contact the address above for questions about providers and international processing.

Cookies and browser storage

Air Lune uses HttpOnly cookies to maintain sign-in and guest access. Access cookies last up to 15 minutes, refresh cookies up to 30 days, and the guest cookie up to 12 hours. The guest cookie’s lifetime is separate from the two-minute seat reservation. Session renewal or joining can replace or renew cookies.

The installed web app may cache application files in your browser. You can remove site data through your browser settings. Removing sign-in cookies logs you out; removing the guest cookie prevents that browser from proving ownership of its current guest seat.

Google advertising

Air Lune includes Google AdSense advertising code. Third-party vendors, including Google, may use cookies to serve ads based on your previous visits to Air Lune and other websites. Google’s advertising cookies enable Google and its partners to personalize ads using visits across websites, subject to your choices and applicable consent requirements.

You can manage personalized advertising through Google My Ad Center and learn about advertising technologies at Google’s advertising policies. Participating vendors also offer choices through YourAdChoices. These choices relate to advertising; essential account and guest-access cookies serve a separate purpose.

Storage and your requests

Account, flight, task, and message records remain stored to support your account, session history, and conversations. The application does not currently apply a general automatic deletion schedule to those records. Technical records may also be kept for security and troubleshooting. Backups rotate separately, so removal from the active service does not imply immediate removal from every backup.

To request access, correction, an export, account deletion, or information about retention, email mohammad@lattice-lab.com. Requests are handled manually, and verification of account ownership may be needed. Some records may need to be retained for security, resolving disputes, or legal obligations; a request’s handling depends on the information and applicable law.

Depending on your location and the circumstances, you may also have rights to restrict or object to processing, withdraw consent, and complain to your local data-protection authority. Withdrawing consent does not affect processing already carried out lawfully. This page will be updated when the service’s data practices change.

For the rules of using the service, read the Terms of use.