18 or older?
Moonlight Community
How Moonlight processes your personal data and uses cookies.
Last updated: June 2026
Personal data collected via the moonlightco.fr website is processed by Moonlight Community, whose full identification details appear in the site's legal notice.
No Data Protection Officer (DPO) has been appointed to date. Requests regarding personal data are handled directly at the email address above.
Depending on how you use the site, Moonlight collects the following data:
| Context | Data collected |
|---|---|
| Creating an individual account | Gender, first name, last name, email, password, date of birth, phone number, delivery address, billing address |
| Creating a business account | Company name, SIRET, EU VAT number, contact person, email, phone number, addresses, business activity |
| Orders | Order history, products purchased, amounts |
| Payment | Data sent directly to our payment provider (Stripe). Moonlight does not store any banking data |
| Premium program | Username, avatar, savings made, level, membership duration |
| Contact | First name, last name, email, message, reason for contact |
| Browsing | IP address, browsing data, cookies (see the Cookies tab) |
| Marketing consent | Newsletter subscription status, date and source of consent |
| Purpose | Legal basis |
|---|---|
| Creating and managing the customer account | Performance of the contract |
| Age verification (18 years minimum) | Legal obligation / legitimate interest |
| Processing and delivering orders | Performance of the contract |
| Invoicing and accounting obligations | Legal obligation |
| Managing the Premium program (levels, benefits) | Performance of the contract |
| Responding to requests via the Contact page | Legitimate interest / pre-contractual measures |
| Managing business accounts and quotes | Performance of the contract / legitimate interest |
| Sending the newsletter and marketing communications | Consent (opt-in) |
| Website audience measurement (statistics) | Consent (non-essential cookies) |
| Fraud prevention and website security | Legitimate interest |
Personal data is disclosed to Moonlight's authorized internal teams and, where applicable, to the following processors, strictly to the extent necessary for their service:
Moonlight does not sell or rent its users personal data to third parties.
Certain providers (in particular Stripe, Google and Cloudflare) may process data outside the European Union, including in the United States.
These transfers are governed by the safeguards provided for by the GDPR (European Commission standard contractual clauses or an adequacy decision, depending on the provider); this point still needs to be confirmed precisely with each provider before final publication.
| Data | Retention period |
|---|---|
| Customer account (individual or business) | Duration of the business relationship, then kept for evidentiary purposes |
| Billing data | 10 years (legal accounting obligation) |
| Payment data | Not retained by Moonlight (held by Stripe) |
| Marketing consent | Until consent is withdrawn or 3 years of inactivity |
| Contact requests | As long as necessary to handle the request |
| Cookies | See the Cookies tab |
The exact retention periods for the customer account and contact requests are currently being validated with our legal counsel.
When an account deletion is requested, personal data is anonymized; orders and invoices required for accounting and legal obligations are retained in a form that no longer identifies the user, for the legally required period.
In accordance with the General Data Protection Regulation (GDPR) and French data protection law, every person has the following rights over their personal data:
These rights can be exercised from your customer account for data that can be edited directly, via the site's Contact page, or by email at contact@moonlightco.fr.
A response is provided within a maximum of one month. If a difficulty arises, you may lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL) : www.cnil.fr.
Moonlight implements reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure.
These measures include, in particular: encrypted connections (HTTPS), role-based access management in the back office, anti-bot protection (Cloudflare Turnstile), and the fact that no banking data is stored.
The website is not intended for minors. Account creation and purchases are reserved for individuals aged 18 and over (see the General Terms and Conditions of Sale).
Moonlight may update this policy, in particular to reflect a regulatory change or a change to the website. The applicable version is the one published on the date of consultation.
