You can use the whole site without giving us any personal data. We have no ads, no tracking and no analytics tools. We only process personal data when you subscribe to the Moon Letter or contact us, and when your browser fetches pages from our server.
The place you choose is stored only in your own browser. It is not sent to us.
Who is responsible for your data
Adrila Sweden AB, Swedish company registration number 559001-7934, Nickes Väg 60, 423 49 Torslanda, Sweden, is the controller for the processing described here. This means we decide why and how the data is processed, and we are responsible for doing so in line with the EU General Data Protection Regulation (GDPR) and Swedish law.
Questions about your personal data, or want to use your rights? Email privacy@moonposition.com or write to the address above. You can also choose “My personal data” in the contact form.
What data we process and why
For each kind of processing we state the purpose, meaning why we do it, and the legal basis in GDPR Article 6 that makes it lawful.
When you subscribe to the Moon Letter
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, chosen place, which letters you chose, language | Send the Moon Letter with times for your place | Your consent (Art. 6(1)(a)). You give it by ticking the box and confirming via the link in an email. |
| Time of consent and confirmation, IP address at confirmation, time of unsubscribing | Be able to show that you consented and that we respected an unsubscribe | Legitimate interest in being able to show the mailing is lawful, as the GDPR requires (Art. 6(1)(f), read with Art. 7(1)) |
| Whether letters are delivered | We do not track opens or clicks. We only see if a letter bounces, so we can stop sending to addresses that don’t exist. | Legitimate interest in a working mailing (Art. 6(1)(f)) |
You can withdraw your consent at any time with the link at the bottom of every letter, or by emailing us. This does not affect the lawfulness of processing before you withdrew. The Moon Letter contains no advertising.
When you contact us
| Data | Purpose | Legal basis |
|---|---|---|
| Name if you give it, email address, topic, the message and our correspondence | Answer and handle your request | Legitimate interest in being able to reply to people who contact us (Art. 6(1)(f)) |
Please don’t include sensitive personal data, such as about health, in your message. We don’t need it.
When you visit the site
| Data | Purpose | Legal basis |
|---|---|---|
| IP address, time, page requested, browser type (server logs) | Deliver the pages, detect and stop attacks and errors | Legitimate interest in a secure, working site (Art. 6(1)(f)) |
Where we rely on legitimate interest, we have weighed our interest against your interest in privacy. The data is minimal, kept briefly and used for nothing else. You have the right to object, see your rights.
Fonts and images are served from our own server. Your browser does not fetch anything from Google or other third parties while you read the site.
We make no decisions about you based solely on automated processing, and we do no profiling (Art. 22).
Your location
The Moon’s position depends on where you are, so you can choose a place. Your choice, and your recent places, are stored in your own browser. The place is sent in a cookie when you open a page, so we can compute the times for it, but we do not store it. Read more in the cookie policy.
If you tap “Use my location”, your browser asks for permission first. The position is used only in your browser to compute the Moon’s position and find the nearest place. It is not sent to us.
The cloud forecast on Moon live is fetched through our server from the weather service Open-Meteo. We send only the place’s coordinates, rounded to about one kilometre, and never your IP address. We do not store the coordinates.
Who receives the data
We never sell personal data and never share it for advertising. We use suppliers who process data on our behalf, known as processors. They have signed agreements with us (Art. 28) and may only use the data to provide their service to us.
- Website and server: we run them ourselves, so no supplier has access to the data there.
- Sending email, such as the Moon Letter: an email service we have a data processing agreement with.
We may also have to disclose data where the law requires it, for example to the police in a criminal investigation.
Transfers outside the EU/EEA
We prefer suppliers that process data within the EU/EEA. If a supplier does process data outside the EU/EEA, we make sure a safeguard approved under the GDPR is in place: a European Commission decision that the country offers an adequate level of protection (for example the United Kingdom, or the EU–US Data Privacy Framework for certified US companies), or the Commission’s standard contractual clauses together with any additional measures needed (Art. 44–46). Email us if you would like a copy of the safeguards.
How long we keep the data
- Moon Letter: for as long as you subscribe. If you never confirm your sign-up, the address is deleted after 7 days. After you unsubscribe, the address is deleted within 30 days.
- Proof of consent and unsubscribe: 24 months after the subscription ends, then deleted.
- Contact: 12 months after the matter is closed.
- Server logs: 30 days, longer only if needed to investigate an ongoing security incident.
- Accounting: if we ever sell something, records are kept for 7 years under the Swedish Accounting Act.
Your rights
You have the right to:
- access the data we hold about you and get a copy of it (Art. 15)
- have errors corrected (Art. 16)
- have data erased, for example when it is no longer needed or when you withdraw consent (Art. 17)
- restrict processing, for example while an objection is being assessed (Art. 18)
- receive data you gave with consent in a machine-readable format and move it (Art. 20)
- object to processing based on legitimate interest (Art. 21). We will then stop, unless we can show compelling grounds that override yours.
- withdraw your consent at any time, as easily as you gave it (Art. 7(3))
Email privacy@moonposition.com. We reply without undue delay and within one month at the latest (Art. 12). It is free of charge. We may ask you to confirm it is you, for example by replying from the same email address.
Complaints
If you think we handle your data wrongly, we’d like to hear from you first so we can fix it. You always have the right to complain to a supervisory authority. Our lead authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden. Phone +46 8 657 61 00, email imy@imy.se, web imy.se.
You may also complain to the data protection authority in the EU/EEA country where you live or work. In the United Kingdom, that is the Information Commissioner’s Office (ico.org.uk).
Security
All traffic to the site is encrypted with HTTPS. Only people who need the data for their work have access to it, with personal logins and two-factor authentication. If an incident still threatens your rights, we report it to IMY within 72 hours and inform you where the law requires it (Art. 33–34).
Children
People of all ages can use the site without giving any data. To subscribe to the Moon Letter you must be at least 16, or the age of digital consent in your country if that is lower (13 in Sweden and the United Kingdom). If you are younger, a parent or guardian must consent on your behalf.
Changes to this policy
If we change how we process personal data, we update this page and the date at the top. We tell subscribers about larger changes in the Moon Letter before they take effect. If a change requires new consent, we ask you first.
Last updated 31 October 2026. Version 1.0. This English version and the Swedish version on manen.nu have the same content.