Privacy policy

Last updated 8 September 2026. This is the whole policy, not a summary of one.

What we store

Your username and a salted SHA-256 hash of your password. We do not store the password itself, and we cannot recover it — if you lose it, we reset it, we do not send it back to you.

If you write to us through the contact form, we store what you wrote and the name and email you gave us, so that we can answer.

Orders: what you bought, when, and where it was sent.

What we do not store

We do not run third-party analytics and there are no advertising trackers on this site. There is no server-side session table either: your sign-in is a signed token held in a cookie, which means we are not keeping a list of who is currently logged in.

Card numbers never reach our servers. Payments are handled by our payment processor.

Cookies

One cookie, named aluna. It holds your signed session token, it is HttpOnly and SameSite=Lax, and it expires after seven days. Signing out clears it immediately.

Your rights

You can ask for a copy of everything we hold about you, or ask us to delete it, by writing to privacy@aluna.ink. We answer within thirty days, and deletion means deletion — not deactivation.

Who to contact

Nemequene LLC, 700 Narragansett Park Dr, Ste 100, Pawtucket, RI 02861, USA. privacy@aluna.ink

If we ever change this policy we will date the change at the top of this page and say what moved.