Privacy Policy
Moonward (“Moonward”, “we”, “us”) is a free daily game at moonward.fun. Each day you guess what percentage of Americans gave a particular answer to six real, published survey questions, and your guesses fly a rocket toward the Moon. This policy explains what information we collect when you play, why, who helps us run the game, and the choices you have.
The short version: you can play without an account. We collect only what the game needs to work, keep the daily rankings fair and remember your progress. We do not sell your information. We count how players use the game, and we measure whether our own ads on Facebook and Instagram bring people to play, which you can switch off (see section 4).
1. Information we collect
When you play (no account needed)
- A random player ID, stored in a cookie named
ms_pid. It is a random code, not your name. It lets the game remember today’s mission and your streak on this device. It lasts up to 400 days. - Your gameplay: the guesses you enter, the boost you pick, the miles you earn, the mission number and the time of each turn.
- A scrambled form of your IP address. We run your IP address through a one-way, keyed hash and keep only the result. We use it to stop one network from flooding the daily rankings. We do not store your IP address itself in our game database.
- Settings saved on your device (in your browser’s local storage): sound on or off, reduced motion, your ad measurement choice, and a cache of your recent results. These stay on your device.
- Usage events: when you open the game, begin, launch, finish or land a mission, share a result, or ask for a sign-in link, we record which of those happened, when, and the mission number, tied to your player ID. These events never include the questions, your guesses or the answers.
- How you found us: if you arrive from a link tagged with a campaign (the
utm_sourceandutm_campaignlabels) or a Facebook click ID (fbclid), we save those labels with your player ID the first time, so we can tell which ads and links bring people to play. - Standard server logs kept briefly by our hosting provider, such as IP address, browser type and the pages requested, used for security and to fix errors.
If you choose to sign in
Signing in is optional. It lets you keep your streak and flights on more than one device.
- Email sign-in: your email address, which we use to send you a one-time sign-in link.
- Sign in with Google: Google shares your email address, your name and your profile picture with us. We ask Google only for the basic
openid,emailandprofilepermissions. - We link your account to your player ID so your gameplay follows you between devices.
We do not collect payment details, your contacts, your location, or anything from your Google account beyond the basic profile described above.
2. How we use information
- To run the game: serve the daily mission, score your guesses and show your results.
- To remember your progress, streaks and history, and to sync them across devices if you sign in.
- To keep the daily rankings fair and prevent cheating and abuse.
- To send the sign-in emails you ask for. We do not send marketing email.
- To keep the service secure, fix problems and understand, in aggregate, how the game is played so we can improve it.
- To measure our own advertising: whether people who see our ads on Facebook and Instagram go on to play, and to show those ads to people likely to enjoy the game (see section 4).
3. Google user data
If you use Sign in with Google, we use the information Google provides (email address, name and profile picture) only to create and sign you in to your Moonward account and to keep your game progress. We do not sell this information, transfer it to anyone except the service providers listed below that run sign-in for us, or use it for advertising. Humans do not read it except when you ask us for support or the law requires it.
Moonward’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove Moonward’s access at any time from your Google account at myaccount.google.com/permissions.
4. Who helps us run Moonward
We share information only with service providers that run parts of the game for us, and only as much as they need:
| Provider | What they do |
|---|---|
| Railway | Hosts the game and its database. |
| Supabase | Runs sign-in and stores account details (email, and name and profile picture if you use Google). |
| Resend | Delivers sign-in emails. |
| Cloudflare | Provides our domain name service. |
| Provides Sign in with Google, if you choose it. | |
| Meta Platforms | Measures our ads on Facebook and Instagram (the Meta Pixel and Conversions API, described below). |
We may also disclose information if the law requires it, or to protect the safety of our players or the service.
Our own analytics
The usage events described in section 1 are stored in our own database on Railway. No outside analytics company receives them. We look at them only in aggregate, for example how many players finished today’s mission or which campaign brought them.
Ad measurement: the Meta Pixel and Conversions API
Moonward uses the Meta Pixel, a script from Meta Platforms, to measure whether our ads on Facebook and Instagram lead people to play. When it is on, your browser loads it from Meta and it sends Meta: that you viewed the page, and when you start a mission, complete a mission, land on the Moon or share a result, with the mission number and whether you landed. Meta also receives what any website sends when it loads, such as your IP address, browser type and the page address, and the Pixel sets a first-party cookie named _fbp (and _fbc if you arrived from a Facebook ad). Meta can connect this to your Facebook or Instagram account if you have one, under Meta’s Privacy Policy.
When you complete a mission, our server may also send that one event to Meta directly through Meta’s Conversions API, so it is counted even if your browser blocks the Pixel. That message contains the same event ID as the Pixel’s (so Meta counts it once), the mission number, whether you landed, your IP address and browser type, the _fbp and _fbc cookie values or Facebook click ID if present, and a one-way hash of your random player ID. It never contains your email, your name, your Google account information, the questions, your guesses or the answers.
To opt out, open Settings in the game and switch Ad measurement off. The Pixel then stops sending events and our server stops sending events to Meta for your browser. If your browser sends a Global Privacy Control signal, ad measurement is off automatically. You can also block the Pixel with your browser’s tracking protection or an ad blocker, and manage how Meta uses this information in your Facebook ad preferences.
We do not sell personal information. Under California law, sending information to Meta for ad measurement may count as “sharing” for cross-context behavioral advertising; switching off Ad measurement, or sending a Global Privacy Control signal, opts you out of it.
5. How long we keep information
We keep gameplay and account information while you keep playing, so your history and streaks work. You can ask us to delete it at any time. Usage events are deleted after about 13 months. Server logs are kept only briefly by our hosting provider. Meta keeps the information it receives under its own policy.
6. Your choices and rights
- Play without an account. Signing in is always optional.
- Sign out any time from Settings.
- Turn off ad measurement from Settings, or with a Global Privacy Control signal (see section 4).
- Clear your device data by clearing this site’s cookies and storage in your browser.
- Access or delete your data: email hello@moonward.fun from the address you signed in with, or tell us your player details. We will confirm and respond within 30 days.
Depending on where you live, you may have other rights, such as correcting your information. Contact us and we will help.
7. Children
Moonward is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we will delete it.
8. Security
We use encrypted connections (HTTPS), signed cookies and access controls to protect your information. No online service can be perfectly secure, but we work to keep what we hold safe and to hold as little as possible.
9. Changes
If we change this policy, we will update it here and change the effective date above. If a change is significant, we will say so in the game.
10. Contact
Questions or requests: hello@moonward.fun.