Privacy Notice

Version 1.0, 6 November 2026. This notice covers joinmoonlight.app. It is written in plain English.

Who is responsible

Oh My Moonlight UG (haftungsbeschränkt), Kollwitzstr. 76, 10435 Berlin, Germany. Register: Amtsgericht Charlottenburg, HRB 276887 B. Privacy questions: hello@moonlightapp.de.

What this site is

joinmoonlight.app is where anyone can post, without an account, what happened to them in a public place. From these posts we are building a map.

What the form collects

What happened, where you were, the street, station or venue, roughly when, whether anyone stepped in, and one line in your own words. You can tick a box that allows us to share your post with the details changed. You can add an email address if you want to know when the Moonlight app opens. The email is optional.

We do not ask for your name, and we do not store your name or your IP address with your post. Please leave out names and anything that describes a person. If a post contains such details, we remove them.

What happens to your post

A person at Moonlight reads every post. What goes on the map is a pin with the kind of incident, the place and the time. Your words are not published. If you ticked "You may share my post, with the details changed", we may retell it with names, places and details changed so that nobody can be recognised.

Where it is stored

The form runs on Framer (Framer B.V., Amsterdam, Netherlands), which stores each post for us. Framer sends a copy of each post to our moderation mailbox, which runs on Google Workspace (Google Ireland Limited, Dublin). Both work for us under a contract and may not use the posts for anything else. Where data is processed outside the EU, this rests on the EU-US Data Privacy Framework or the EU standard contractual clauses.

Why we may do this

You choose to post, and we have a legitimate interest, shared with the people who will use the map, in making patterns in public places visible (Art. 6(1)(f) GDPR). Your email address is used with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. A post may describe harassment or assault. We treat every post as sensitive and keep it with restricted access. We never use posts for advertising and we never sell them.

How long we keep it

Your email address is deleted once we have told you that the app is open, at the latest after 90 days. The words of a post are kept for up to twelve months while the map is being built; after that we keep only the pin. A post you want removed is removed: write to hello@moonlightapp.de and say roughly when you sent it and what it was about.

Visiting this site

When you open a page, Framer's servers receive the technical data every website needs to answer you: your IP address, the time, the page and the type of browser. Framer keeps these logs for a short time for security and deletes them. We count visits with Framer's own statistics. They work without cookies and build no profile of you, which is why this site has no cookie banner.

Your rights

You can ask what we hold about you, have it corrected or deleted, limit how we use it, and object to our use of it for reasons that come from your situation (Art. 15 to 21 GDPR). Because posts are stored without a name, tell us roughly when you posted so we can find yours. You can complain to the Berlin data protection authority, Berliner Beauftragte für Datenschutz und Informationsfreiheit, datenschutz-berlin.de.

Age

This site is for people aged 18 and over.

Changes

This notice is dated. When it changes, the new version replaces this one here, with the date.