Privacy & Security Details

Your period dates, symptoms, notes, and cycle history stay on the device and browser you use. There is no Lunara account, no ads, no analytics, and no third-party tracking scripts.

You open Lunara with a PIN, you choose when to make backups, and Stripe only appears if you choose the optional supporter checkout.

Lunara stores tracker records in IndexedDB inside the current browser profile. IndexedDB is browser storage, so the data is tied to this browser on this device, not to a Lunara cloud account.

Lunara also uses localStorage for small local preferences and safety records, such as failed unlock backoff. Those records help the lock screen behave consistently after refresh.

Clearing cookies and site data, clearing website data, changing browser profiles, resetting the browser, or replacing the device can remove Lunara's saved data. Create a password-protected backup first.

Saved tracker records are encrypted before they are stored. Lunara uses Web Crypto with AES-GCM. PIN and passphrase keys are derived with PBKDF2 using SHA-256 and 600,000 iterations.

You create a PIN during setup. That PIN unlocks your tracker on this device. After setup, you can add an optional passphrase while keeping PIN unlock available. The passphrase is another local unlock secret, not account recovery.

Refreshing or closing Lunara returns the app to the lock screen. Lunara cannot recover a forgotten PIN or passphrase for you.

Lunara can create password-protected backups, plain backups, and readable exports. A password-protected backup is the safer choice for restore because the file is protected if someone else finds it.

Plain backups are not encrypted. Readable exports are useful for your own records, but they are not the safer full-recovery path.

Restore checks the selected backup before continuing. If you confirm, restore replaces the current tracker data instead of merging two histories together.

The optional safety PIN creates a separate empty-looking space for coercion or privacy-risk situations. It is separate from the real tracker data.

The safety PIN does not recover the real tracker, hide real data, sync data, contact anyone, send alerts, or replace emergency, legal, or safety-planning help.

Supporter payments use Stripe-hosted Checkout. Lunara sends the checkout request to Stripe for payment processing and receipts; it does not send cycle entries, notes, symptoms, or backup content to Stripe.

The tracker works for free whether or not you make the optional supporter payment.

Lunara is a browser app. Supported browsers may offer an install option, which creates a shortcut for easier repeat access. It is not a separate App Store or Google Play download today.

Updates arrive through the browser or installed shortcut. When Lunara says a new version is waiting, make and check a password-protected backup before refreshing.

Lunara avoids third-party analytics, ad pixels, and tracking scripts in the tracker. Production security headers keep scripts, connections, workers, manifests, fonts, media, and images scoped to the app itself, with Stripe allowed only for optional checkout.

The app also sends headers that block framing, disable browser features Lunara does not need, prevent MIME sniffing, and avoid referrer leakage.

Lunara is not medical, legal, or emergency guidance. It cannot diagnose, treat, confirm pregnancy, provide contraception, guarantee fertility timing, or make safety decisions for you.

For urgent symptoms, safety concerns, pregnancy, contraception, diagnosis, treatment, or legal decisions, contact a qualified professional or local emergency services.

Support is available at support@lunaraprivacy.app, but do not send PINs, passphrases, backup passwords, readable backup content, or card details by email.