Privacy and permitted use
Permitted use
Section titled “Permitted use”Moonbrush data and models may be used for marketing and engagement only. They may never be used to decide a person’s eligibility for credit, insurance, employment, housing, education or similar. The full terms are in the Data Use Policy. Research on data-driven decisions and ad delivery shows how such systems can discriminate even without intent (Barocas and Selbst, 2016; Ali et al., 2019); see research note 3.
Controls built into the product
Section titled “Controls built into the product”- Opt-outs. A person can opt out at moonbrush.com/privacy-choices. The email is hashed in their browser. From the next nightly update, the person is kept out of every client list.
- Ambiguous opt-outs suppress widely. When an opt-out hash matches more than one candidate, every candidate is suppressed.
- Global Privacy Control. Every stored event carries the browser’s Global Privacy Control signal (Zimmeck et al., 2026) and consent state. An identified person whose browser sent the signal is suppressed.
- Every export door. Suppression applies to every export path, and an export fails closed if the suppression list cannot be read. See What leaves the platform.
- Opt-out receipts are kept. A record of each choice is kept permanently, so the choice keeps being honored.
- Age. Every age band the product offers starts at 18.
- Modeled ethnicity or political ideology. As the Data Use Policy states: “These fields are never selectable, never used as targeting inputs and never exported.”
Retention and deletion
Section titled “Retention and deletion”Client data is kept for the term of the client’s agreement plus 90 days, unless the client directs otherwise. Moonbrush deletes it on request and can provide a certificate of deletion. See the security overview.
The governing documents
Section titled “The governing documents”These pages describe how the product works. The legal documents govern.