Privacy at Lunoland
Lunoland makes personalised children’s books. To do that, you trust us with something precious: photos of your child. This page explains exactly what we collect, what we do with it, and how little of it we keep. Lunoland is operated from the United Kingdom and this policy is written for UK law (UK GDPR and the Data Protection Act 2018). We follow the ICO’s Children’s Code: we collect the minimum we need, keep it the shortest time we can, and never use your family’s data for anything you wouldn’t expect.
Who we are
The data controller is LUNOLAND LTD (trading as Lunoland, lunoland.co.uk), a company registered in England and Wales, company number 17363841, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact us any time at hello@lunoland.co.uk.
What we collect
Only what the book needs: the photos you upload; your child’s first name and age group; the names, relationships and appearance details of any family members you add; your chosen story, language and optional dedication; and your email address so we can deliver the book and let you sign in. When you pay, your card details go directly to Stripe, our payment processor: they never touch our servers, and we store only a payment reference and the amount paid. We do not collect passwords, or anything from your child directly: Lunoland is used by parents and guardians, and you provide your child’s information on their behalf.
Why we can use it (lawful basis)
We process your order details and photos because you asked us to make your book (performance of a contract). Where the law treats a child’s images with special care, we rely on the consent you give as their parent or guardian when you place the order, which you can withdraw at any time by asking us to delete the book.
Your photos are deleted automatically
Uploaded photos exist for one purpose: creating your book’s characters. They are deleted automatically 24 hours after your book is delivered. If an order fails or doesn’t complete, the photos are deleted automatically after 7 days at the latest: the short grace period lets us fix a failed book without asking you to upload again. We never publish your photos and never use them to train AI.
The character artwork we keep, and why
Making your book creates illustrated character drawings of your child and family (not photographs: stylised artwork in your chosen style). We keep these with your finished book so you can order another story starring the same characters without uploading photos again. They are visible only to you, used only for your own repeat books, and never shared, published, or used for anything else. They stay as long as your books stay in your account, and we delete them (along with the book, or your whole account) whenever you ask, by emailing hello@lunoland.co.uk.
Companies that help us make your book (our processors)
We share data only with the services that do the work, under contracts that bind them to protect it: OpenAI (writes and illustrates the book: your photos and story details are sent to OpenAI’s API to generate the artwork; OpenAI does not use API data to train its models and holds it only briefly for abuse monitoring), Stripe (takes your payment: your card details go straight to Stripe and are never stored on our servers), Railway (hosts the website and stores your books), Resend (sends our emails), and PostHog (privacy-first analytics on EU servers: configured cookieless, so it stores nothing on your device). We never sell data or share it with advertisers.
One cookie, and only when you sign in
Signing in works by emailed link: no passwords. When you click your link we set one cookie (luno_account) that keeps you signed in for 30 days. It contains only your signed email address, is essential for sign-in to work at all, and tracks nothing. Because it is strictly necessary, UK law (PECR) does not require a consent banner for it, and we set no other cookies.
Email: only what you asked for
We email you your book, your sign-in links, and messages about an order in progress. We will never send marketing email unless you separately opt in, and we haven’t asked you to yet.
Your rights
You can ask us at any time to: see the data we hold about your family, correct it, delete it (including finished books and character artwork), or receive a copy. Email hello@lunoland.co.uk. We’ll act within one month. If you’re unhappy with our answer you can complain to the Information Commissioner’s Office (ico.org.uk).