LAST UPDATED / 8 SEPTEMBER 2026
Last updated: September 8, 2026. Moon Soldier is responsible for the personal information described in this Privacy Policy. This notice explains what we collect, why we use it, who may process it for us, how long we keep it and the rights available to you. This notice applies when you visit the site, use our tools including Content Tracker, connect an Instagram professional account, apply for beta access, submit product feedback, subscribe to updates, make a payment or work with Moon Soldier.
1. What We Collect
We collect limited information through:
2. How Your Data Is Used
We use information to deliver requested tools and services, respond to enquiries, manage payments, administer beta access, request product feedback, improve the website and products, understand aggregate performance and acquisition journeys, maintain security and send updates you have chosen to receive. Depending on the activity, we rely on performance of a contract, legitimate interests in operating and improving Moon Soldier, your consent, or compliance with legal obligations. We do not sell your personal information. Information may be processed on our behalf by service providers including Webflow, Supabase, Meta, OpenAI, Google Analytics, Metricool, CookieYes, payment providers and email or operational platforms. Some providers may process data outside the UK; where required, appropriate contractual or legal safeguards are used.
If you apply for Content Tracker beta access, we collect the email address you submit and your consent to receive beta-access and weekly product-feedback messages. If you are accepted, we use that email to send setup instructions and beta communications. Feedback responses may include usage frequency, favourite or least useful features, bugs, confusing experiences and improvement ideas. We use beta feedback to test, improve and prioritise the product. You can opt out of beta feedback messages at any time by replying to an email or contacting info@moonsoldier.co.
3. Cookies & Tracking
We use essential technologies for site functionality and consent management. With Analytics consent, we use Google Analytics, Metricool and Moon Soldier's first-touch attribution to understand how people discover and use the site. First-touch attribution may store the original traffic source, medium, campaign, landing page and referrer in your browser and add those values to forms you choose to submit. CookieYes records your consent choices. You can accept, reject or revisit those choices through the cookie banner. We do not currently use advertising cookies on this site or track you across unrelated websites.
4. Retention & Your Rights
We keep personal information only as long as reasonably needed. Enquiry and service records are ordinarily retained for up to 24 months, beta applications and feedback for up to 24 months after the relevant beta period unless they are no longer needed sooner, transaction and legal records for the period required by law, generally up to six years, and analytics data according to the relevant provider settings. You may ask for access, correction, deletion, restriction or portability of your information, object to certain processing, or withdraw consent at any time. To exercise a privacy right, email info@moonsoldier.co. We may need to verify your identity before completing the request.
5. Complaints & Updates
Please contact us first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk. We may update this notice when our services, providers or legal obligations change; the date above shows the latest revision.
6. Content Tracker& Instagram Data
When you choose to connect an Instagram professional account to Content Tracker, Moon Soldier uses Meta's Instagram API with Instagram Login. With your permission, Content Tracker receives and processes data from your own connected professional account, including your Instagram account ID, username, profile picture, follower and media counts, media IDs, captions, media type, permalink, posting date, media or thumbnail URLs and supported post insights such as views, reach, likes, comments, shares, saves, total interactions and, where available, profile visits, profile activity and follows. Content Tracker may keep historical snapshots of these metrics so you can compare performance over time.
Content Tracker requests only the Instagram permissions needed for the current analytics product: instagram_business_basic and instagram_business_manage_insights. We use this data to connect and identify your account, retrieve your posts and insights, calculate analytics and benchmarks, compare performance, maintain historical tracking, generate performance guidance, display your profile identity and sync status, and keep the service secure. We do not sell Instagram Platform Data or use it to serve advertising.
Some Content Tracker features use OpenAI as a service provider to produce content-understanding classifications, social SEO suggestions and evidence-based Next Move guidance. For those features, Moon Soldier may send the minimum information needed to generate the requested output, such as a post caption, format or content context and selected performance evidence. Instagram access tokens, Moon Soldier passwords and account session credentials are not sent to OpenAI. Generated classifications and recommendations may be stored in Moon Soldier's own systems so they can appear automatically in Content Tracker and improve the user's ongoing experience.
Content Tracker also stores the account connection record, encrypted Instagram access-token credentials and security records needed to maintain your session. Session tokens are stored as hashes rather than in readable form. Content Tracker data is processed and stored using Supabase infrastructure. Instagram access credentials are removed when you disconnect the Instagram account. Disconnecting stops future Instagram API access but retains the analytics history already collected so you can reconnect later. If you choose Delete Moon Soldier Account from your Account, the Moon Soldier account and linked Content Tracker data are removed, including the connected account record, stored Instagram credentials, sessions, posts, metric snapshots and Content Tracker scores associated with that account. You can also follow the public data-deletion instructions linked from Moon Soldier if you can no longer access your account.
Moon Soldier uses HTTPS, restricted server-side credentials, hashed session tokens, encrypted or otherwise protected stored access credentials and separated staging and production environments to reduce the risk of unauthorised access. Access to connected-account data is limited to the functions needed to operate Content Tracker and provide the experience requested by the account holder.
Content Tracker is currently designed for Instagram professional accounts, meaning Business or Creator accounts. Platform data is retained while your Moon Soldier account and Content Tracker access remain active unless you delete the account or request deletion sooner. Short-lived OAuth and login records expire after use or after their stated validity period. For questions or a deletion request, contact info@moonsoldier.co.
Contact
For privacy questions or concerns, contact:
info@moonsoldier.co
If you create a Moon Soldier account, we process the name and email address you provide, an internal account identifier, the Moon Soldier products or resources attached to your account, account creation and recent login information, and security records needed to keep you signed in. Password authentication is handled through Supabase Auth. Moon Soldier does not store your password in readable form. Moon Soldier session tokens are stored as hashes and normally expire after 30 days, with expired or revoked sessions removed through routine housekeeping.
Your Moon Soldier account is the identity layer used to access products such as Content Tracker and can support additional Moon Soldier products over time. Connecting Instagram is optional and only occurs when you choose to connect Instagram from Content Tracker. Deleting your Moon Soldier account removes the account profile, active account sessions and product-access records held for that account, together with linked Content Tracker data where applicable. Records Moon Soldier is legally required to retain, such as certain payment or accounting records, may be kept separately for the required period.