Last updated: September 21, 2026

Privacy policy

1. Introduction

Tridant Inc., a Delaware corporation ("Tridant," "we," "our," or "us"), makes Moonshine, projection-mapping software that runs on your own machines, and operates moonshine.software. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit the website, download Moonshine, or use the Moonshine software.

Moonshine is self-hosted. Your projects, media, meshes, show data and user accounts stay on the machines you install it on, and we do not receive them. The software contacts us only to activate and check your licence and to look for updates, as described below.

By using our website or software, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

Website

moonshine.software has no forms, no accounts, no cookies, no analytics and no advertising trackers. It is hosted by Cloudflare, which processes the technical data of each request (IP address, user agent, the page requested and the time) to deliver the site and protect it from abuse.

Downloads

When you download Moonshine from download.moonshine.software, we record the version downloaded, your country and the Cloudflare data center that served it. We do not record your IP address.

Licence activation and checks

When you activate Moonshine with a licence key, the software sends Tridant ID, our licensing service:

• your licence key
• a fingerprint of the machine: salted, one-way hashes of hardware identifiers, never the identifiers themselves
• the machine's hostname, operating system and version, and the Moonshine version

While a licence is active, the software checks it periodically. We keep the licence, the devices activated on it with the details above, and when each device was last seen, so that seat limits can be enforced and you can see and release your devices.

Update checks

The Moonshine server looks for new versions through GitHub's public API, and the desktop client through GitHub and our download service. These requests carry your IP address and a user agent, which GitHub and Cloudflare process under their own privacy policies.

Correspondence

If you email us, we keep the correspondence so we can answer you.

Earlier waitlist

Until September 2026 this site offered a waitlist form. It collected your email address, company, what you were working on, your IP address, your user agent and the time you signed up, stored with Cloudflare and forwarded to us by email through Resend. The form has been removed.

3. How we use your information

We use the collected information to:

• deliver the website and downloads, and keep them secure
• activate licences, enforce seat limits, and let you see and release your devices
• make new versions available to the software
• respond to your email and support requests, and tell waitlist members about Moonshine
• detect, investigate, and prevent abuse, fraud, and security incidents
• comply with legal obligations

We do not sell your personal information, and we do not use your data to train machine learning models.

4. Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract (Art. 6(1)(b)): to activate and check the licence you hold and to support you.
• Legitimate interests (Art. 6(1)(f)): to keep the website and download service secure and reliable, to count downloads, and to answer your email. We balance these interests against your rights and limit the data used accordingly.
• Consent (Art. 6(1)(a)): for the earlier waitlist. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): where we must retain or disclose information to comply with applicable law.

5. Data storage, location, and security

Moonshine's online services are operated from the United States. The licensing service and the download service run on Cloudflare's network, which stores licence and device records and download counts.

We implement security measures including:

• encryption in transit (TLS/HTTPS) for every service the software and website use
• signed licence tokens, so a machine's licence cannot be forged or altered
• machine fingerprints stored only as salted, one-way hashes
• licence tokens stored on your machine encrypted with Windows' machine-level data protection

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data retention

We retain data as follows:

• Website request data: as set by Cloudflare's policies.
• Download records: request logs for 3 months; download counts in aggregate, without personal data.
• Licence and device records: for as long as the licence exists, and afterwards as long as needed for legal and accounting obligations. A device you release no longer holds a seat.
• Correspondence: as long as needed to answer you and keep a record of the exchange.
• Waitlist submissions: until we no longer need them to tell you about Moonshine, or until you ask us to delete them.

You may request deletion of your data at any time; see section 8.

7. Third-party services and subprocessors

We use the following providers. Each processes data only as needed to provide its function, and each is bound by its own data processing terms.

We may update this list as our infrastructure changes. Material changes will be reflected here along with an updated "last updated" date.

8. Your rights

All users

Regardless of where you live, you can ask us to access, correct, delete or export the personal data we hold about you, and you can see and release the devices on your licence from the Moonshine software.

EEA and UK residents (GDPR / UK GDPR)

You have the right to:

• access the personal data we hold about you
• rectify inaccurate or incomplete data
• erasure of your data ("right to be forgotten")
• restrict or object to processing, including processing based on legitimate interests
• data portability: receive your data in a structured, machine-readable format
• withdraw consent at any time, without affecting processing carried out before withdrawal
• lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office)

We do not carry out automated decision-making or profiling that produces legal effects concerning you.

California residents (CCPA/CPRA)

You have the right to:

• know what personal information is collected, used, and disclosed
• request deletion of your personal information
• correct inaccurate personal information
• opt out of the sale or sharing of personal information (we do not sell or share your data)
• limit the use of sensitive personal information
• non-discrimination for exercising your privacy rights

How to exercise your rights

Email [email protected], or contact us as described in section 14. We respond to requests within 30 days. We may need to verify your identity before acting, and we will tell you if we need an extension permitted by law.

9. International data transfers

Moonshine's online services are operated from the United States. If you use them from the EEA, the UK, or elsewhere outside the United States, your personal data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary technical measures such as encryption in transit.

10. Cookies and tracking

This website sets no cookies, and we do not run analytics or advertising trackers on it. The Moonshine software's web interface runs on your own server and keeps your sign-in session in your browser; that data stays between your browser and your server, and we do not receive it.

11. Security incident notification

If we become aware of a personal data breach affecting your information, we will notify you without undue delay and, where required, within the timeframes set by applicable law, including notifying the relevant supervisory authority within 72 hours where the GDPR requires it.

To report a suspected vulnerability or security issue, email [email protected] with "security" in the subject line.

12. Children's privacy

Moonshine is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

13. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "last updated" date. We encourage you to review this privacy policy periodically for any changes.

14. Contact us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: [email protected]
Company: Tridant Inc., a Delaware corporation
Principal place of business: California, USA

Terms of use