Privacy Policy
What Lunoo collects, why we collect it, and the choices available to you.
Last updated: August 21, 2026
Lunoo is a public ranking and comparison service. This policy covers the Lunoo website, its public APIs, and the Lunoo Model Context Protocol connector, called the MCP connector below.
Information you provide
If you create an account or contact us, we may receive information such as your email address, display name, profile details, lists, ratings, votes, feedback, and support messages. You can browse public rankings without creating an account.
Information collected automatically
- Basic request and security information, such as IP address, request time, browser type, requested path, and error details, may appear in short-term web server logs.
- We record site interactions needed to operate and improve Lunoo, such as page activity, comparison actions, sign-up steps, and outbound link clicks.
- We may record a first landing source. The browser receives a random first-party token. Lunoo stores only a one-way hash of that token with a bounded source, host, path, and landing path. We do not store the full referring URL or its query string in this record.
- Campaign parameters and advertising click identifiers may be kept in the current session so a later outbound click can be attributed to the landing campaign.
MCP connector data
The MCP connector is public and read-only. It provides tools for resolving a ranking niche, retrieving ranked results, and retrieving public item details.
For connector reliability and product measurement, Lunoo records only limited event-level metadata:
- The MCP method and tool name
- Whether the request succeeded
- Bounded counts of tools, query fields, and returned results
- A short error code when a request fails
- The connector client name and version supplied during initialization
- The event time
Lunoo does not store raw connector prompts, search text, tool arguments, tool results, request identifiers, or user-agent strings in MCP usage telemetry.
Event-level MCP telemetry is retained for no more than 90 days and is then deleted. Aggregate totals that no longer identify an individual event may be retained for longer.
Cookies and local storage
Lunoo uses first-party cookies and browser storage for essential sessions, sign-in, security, theme preferences, and first-touch attribution. The first-touch attribution cookie lasts up to 90 days. Turning off cookies may prevent sign-in, saved preferences, and other account features from working correctly.
How we use information
- To provide rankings, comparisons, accounts, lists, and other requested features
- To protect Lunoo against abuse and diagnose failures
- To understand which pages, connectors, and referral sources are useful
- To measure outbound affiliate activity and improve ranking and content quality
- To respond to support, privacy, and deletion requests
Affiliate and third-party links
Lunoo includes links to third-party websites. Some links may be affiliate links, which means Lunoo may receive compensation if you complete a qualifying action. Third-party sites have their own privacy policies, and Lunoo does not control how they handle information after you leave Lunoo.
Service providers
We may use hosting, security, authentication, analytics, and infrastructure providers to operate Lunoo. They receive only the information needed to provide their service and are subject to their own contractual and legal obligations. We do not sell personal information.
Retention
Account information is kept while an account is active and as needed for security, legal, and operational requirements. Web server and security logs are retained only as long as reasonably needed for operations and abuse prevention. MCP event-level telemetry is limited to 90 days. The first-touch browser cookie lasts up to 90 days. Other pseudonymous analytics records are kept only while they remain useful for the purposes described above.
Your choices
You can block or remove cookies through your browser. You may request access, correction, or deletion of personal information associated with you by contacting [email protected]. We may need to verify your request before acting on it. Some records may be retained when required for security or legal reasons.
Children
Lunoo is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Security
We use access controls, encrypted network connections, bounded data collection, and other safeguards intended to protect Lunoo data. No online service can guarantee absolute security.
Changes to this policy
We may update this policy when Lunoo changes. The updated date above shows when the current version took effect.
Contact
Questions and privacy requests can be sent to [email protected].
