Redmoon Systems OÜ ("Redmoon", "we", "us") is a company registered in Estonia under registry code 17506382, with its registered address at Ruunaoja tn 3, Lasnamäe linnaosa, Tallinn, Harju maakond 11415, Estonia. We are the data controller for the processing described here.
This policy explains what happens to personal data when you visit redmoon.red or write to us.
1. What this policy covers
It covers the redmoon.red website, which is the portfolio site you are reading this on, and any direct correspondence with us.
Each Redmoon product publishes its own privacy policy, and that policy governs the product. Where a product policy and this one disagree about that product, the product policy applies. Yomimaru publishes its policy at yomimaru.app.
2. What the website collects
The site has no accounts, no contact form, no newsletter, and no advertising. We do not run analytics on it and we do not build profiles of visitors.
Your browser stores one item locally, under the key redmoon-onboarding-complete. It records that you have already seen the introduction to the 3D view, so that we do not replay it on every visit. Its value is the word "true" and nothing more. It is strictly necessary to make the site behave the way you asked it to, so we do not ask for consent before storing it. Clearing site data for redmoon.red removes it.
Serving the site does involve technical data reaching our infrastructure providers, including your IP address, the pages you request, and your browser and device type. Section 4 lists who those providers are.
3. What we collect when you contact us
If you write to [email protected] or [email protected], we receive your email address, whatever you put in the message, and the headers your mail client sends with it. We use it to answer you and for nothing else. We do not add you to a mailing list.
The lawful basis is legitimate interest under Article 6(1)(f) GDPR: replying to a message that someone chose to send us. We keep support correspondence for 24 months after the last message in the thread, then delete it.
4. Who processes data on our behalf
Cloudflare delivers the site and protects it from abuse. Every request passes through Cloudflare, so it processes your IP address and basic request information.
Google, through Firebase, hosts the database and file storage that hold the product catalogue and company details shown on the site. Your browser requests that content directly, so those requests carry your IP address to Google's servers.
Cloudflare also handles mail for the domain. Messages sent to [email protected] and [email protected] are received by Cloudflare Email Routing, which forwards them to a Gmail mailbox we hold with Google. Cloudflare routes the message rather than storing it; the mailbox provider is where it is stored and read.
We do not sell personal data and we do not share it for advertising.
5. Transfers outside the EEA
Some of these providers process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or by an adequacy decision.
6. Your rights
Under GDPR you can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict how we use it, or send it to you in a portable format. You can object to processing we base on legitimate interest, and you can withdraw consent wherever we relied on it.
To exercise any of these, email [email protected]. We answer within 30 days, as GDPR requires.
If you think we have handled your data badly, you can complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, at aki.ee. If you live elsewhere in the EU, you can complain to your own national authority instead.
7. Security
We use HTTPS for every connection, restrict administrative access to the site by IP address and PIN, and keep credentials out of the code we publish. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children
The site is not directed at children under 13 and we do not knowingly collect their personal data. If you believe a child has sent us personal data, write to [email protected] and we will delete it.
9. Changes to this policy
When we change this policy we update the version number and the effective date above, and publish the new version on this page.
Contact
Questions about this policy, or about data we hold: [email protected].
Redmoon Systems OÜ, Ruunaoja tn 3, Lasnamäe linnaosa, Tallinn, Harju maakond 11415, Estonia.