Privacy Policy

This policy explains what Lunium AB ("NoneCap", "we") — a company registered in Sweden (org.nr 559576-2690) and the controller of your personal data — collects when you use the site and the API, how we use it, and the choices you have. We try to collect only what we need to run the service.

What we collect

• Account data: your email address and authentication details.
• API usage: the requests you make, including the hCaptcha sitekey and target URL you submit for a solve, timestamps, status, and credits charged. We use this to run, debug, meter, and protect the service.
• Billing data: we use a third-party payment processor for top-ups. Card details are handled by that processor, not stored by us; we keep a record of your purchases and credit balance.
• Site data: basic server logs (IP address, user agent, pages requested) for security and aggregate analytics.
• Analytics data: if you accept analytics cookies, we use Google Analytics to understand how people find and use the site. It sets cookies in your browser and records the pages you visit, where you came from (for example a search engine or a link), and basic device and browser details. When you create an account or make a purchase, our server tells Google Analytics about it (for a purchase, the amount and the pack or plan), linked to the Analytics identifier in your browser, which we keep with your account. We don't send Google your name, email address or account details.
• Signup source: when you create an account, we record the campaign named in the link you followed, and, if you accepted analytics cookies, which site first brought you to NoneCap and the first page you visited.
• Proxy details: if you send your own proxy with a solve, its address and login. We keep the password encrypted for up to 7 days and use it only to perform and improve your own solves and to detect accounts sharing one proxy login to abuse the service, then delete it, and we keep the address and username to run your solves. Our encrypted backups can hold a copy for up to six months before they expire. You can switch this off in your dashboard settings.

How we use it

We use the data above to provide and improve the service, mint and deliver solve tokens, bill for usage, prevent abuse and fraud, respond to support requests, and meet legal obligations. We do not sell your personal data.

Who we share it with

We share data only with service providers that help us operate NoneCap (such as hosting, infrastructure, compute, payment processing, and email), each under terms that limit their use of it, and when the law requires it or to protect the service and our users. The sitekey and URL you submit are used by our solving infrastructure to produce a token and are not sold or shared for advertising. Google receives the analytics data described above as our analytics provider (Google Ireland Limited). It may be processed in the United States under the EU–US Data Privacy Framework.

Cookies

We use three kinds of cookies:

• Necessary: the dashboard's session cookie that keeps you signed in, the cookie that remembers your cookie choice (6 months), and cookies that carry a referral code (up to 30 days) or your sign-up choices through the sign-in steps.
• Signup source (only if you accept analytics cookies): a NoneCap cookie that remembers which site first brought you here, for up to 30 days. We read it only when an account is created, and delete it then.
• Analytics (only if you accept analytics cookies): Google Analytics cookies (_ga and _ga_*), which measure visits, sign-ups and purchases. They last up to two years.

Until you accept analytics cookies in the cookie banner, neither of the last two is set and nothing is sent to Google. You can change your choice at any time with "Cookie settings" at the bottom of the page; declining removes them.

We don't use advertising trackers. You can block or delete cookies in your browser settings, or use Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

How long we keep it

We keep account, billing, and solve request records for as long as your account is active and as long as the law requires afterward. Diagnostic captures taken to debug an individual solve are kept for a short operational window and then deleted automatically. Google Analytics keeps analytics data for 14 months. You can ask us to delete your account data, subject to records we must keep by law.

Security

The site and API are served over HTTPS, API keys authenticate every request, and we apply reasonable technical and organisational measures to protect data. No system is perfectly secure, so we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, email [email protected] and we will respond within a reasonable time.

Changes

We may update this policy. When we do, we will change the date below and, for material changes, give reasonable notice.

Contact

Questions about privacy? Email [email protected].