The Luna Privacy Policy

Updated on: September 20, 2026
Effective on: May 01, 2026

Welcome to The Luna Novel (hereinafter referred to as "we" or "the Website") , which is provided and operated by Pilot Digital HK LIMITED.

We fully recognize the importance of your personal information and are committed to protecting your privacy and information security. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you access and use thelunanovel.com website and related services (collectively the "Services"), as well as your relevant rights.

This Privacy Policy, together with The Luna Novel Terms of Service, constitutes the complete agreement governing your use of the Services. Please read and fully understand the entire content of this Policy before using the Services. Your use or continued use of the Services shall be deemed that you have read, understood and agreed to all provisions of this Privacy Policy.

I. Scope of Application

1.1

This Policy applies to all online novel reading and value-added services provided via the official website of The Luna Novel (thelunanovel.com).

1.2

This Policy does not apply to products, services or websites independently operated by third parties that you access via redirects or links on the Website. When using third-party services, you shall abide by their privacy policies and service rules, and we shall not be liable for their information processing activities.

II. Personal Information We Collect

We only collect information actively provided by you or generated during your use of the Services to the extent necessary for service functionality, as specified below:

2.1 Account Registration & Management Information

(1) When you register an account to access personalized services such as reading history, purchased content management and paid content unlocking, you shall actively provide an email address and set your own account password.
(2) We will not store your password in plaintext in any form; we only retain encrypted password verification data.

2.2 Payment & Order Information

(1) All payment procedures including Coin top-ups, content unlocking and membership subscriptions are independently processed by third-party payment platforms. We do not collect or store sensitive payment information such as bank card numbers or payment passwords.
(2) We only obtain necessary payment result data from third-party payment platforms, including order number, payment amount, payment status and transaction time, to activate service benefits and record transaction ledgers for you.

2.3 Service Usage Information

We automatically collect the following data during your use of the Services to guarantee stable operation, optimize product experience and implement account security risk control:
(1) Device and browser information: device model, operating system version, browser type and version, IP address, device identifier;
(2) Service log information: reading history, records of purchased/unlocked content, access time, page browsing records, function operation logs;
(3) Security risk control data: logs used to identify abnormal login, irregular operations and cyberattacks.

2.4 Other Information You Voluntarily Provide

Contact email, problem descriptions, supporting materials and other information you submit when contacting us via customer service email to report issues.

III. Minors Protection

3.1

The Website only provides services to adults aged 18 and above, and does not offer any services to users under 18 years old.

3.2

If we accidentally collect personal information of minors under 18, we will immediately take reasonable measures to delete such data. You may notify us via the contact information disclosed in this Policy if you discover such circumstances.

IV. Use of Personal Information

4.1

We process collected information strictly in accordance with the principles of legality, legitimacy and necessity for the following purposes:
(1) Deliver, maintain and optimize the Services: complete account login, save reading history, manage unlocked content, grant membership benefits and ensure normal website functionality;
(2) Process transactions and deliver services: verify payment order status, grant Coins, unlock paid content, renew membership privileges, and handle transaction inquiries and disputes;
(3) Account security and risk prevention: identify abnormal login, account theft, irregular operations and cyberattacks to protect your account and Website operation security;
(4) Send necessary service notifications including order confirmation, benefit arrival, service updates and rule changes; reply to your inquiries and feedback when you contact customer support;
(5) Comply with applicable laws and regulatory requirements, fulfill statutory obligations and resolve disputes;
(6) Conduct anonymized and de-identified statistical analysis on service usage to optimize content layout and enhance user experience.

4.2

We will obtain your prior consent if we intend to use your information for purposes not specified in this Policy.

V. Sharing, Transfer and Public Disclosure of Personal Information

5.1 Sharing Principles

We will not sell or rent your personal information to any third party. We may share necessary personal data with third parties only under the following circumstances, and we will bind such third parties to strict confidentiality and information security obligations:
(1) With your explicit consent;
(2) Third-party service providers necessary for service delivery: we share minimal required information with entrusted third parties solely to fulfill the purposes set out in this Policy, including:
① Third-party payment service providers: share order numbers, amounts and other transaction data to complete payment transactions;
② Cloud and technical service providers: providers offering server storage, network acceleration, security protection and data analysis;
③ Other partners indispensable for service provision; detailed SDK information is set forth in Clause IX and the Appendix.
(3) Statutory scenarios: share relevant information when required by laws, legal procedures, government or judicial authorities;
(4) Rights protection: share information within a reasonable and necessary scope to safeguard the legitimate interests of us, users and the public.

5.2

In the event of business merger, acquisition, asset transfer or similar transactions resulting in a change of controller of your personal information, we will notify you in advance via website announcements, and the receiving party shall remain bound by this Privacy Policy.

5.3

We will not publicly disclose your personal information unless explicitly required by law.

VI. Storage and Security of Personal Information

6.1 Storage Location and Retention Period

(1) Your personal information will be stored on servers operated by us and authorized third-party service providers. If cross-border transmission of personal information is involved, we will strictly comply with applicable laws to ensure data security.
(2) We retain your personal information only for the shortest period necessary to fulfill service purposes. Upon expiry, data will be deleted or anonymized, unless retention is mandated by law.

6.2 Information Security

(1) We adopt industry-standard technical and administrative safeguards including data encryption, access control, security audits and firewalls to protect your personal information from unauthorized access, leakage, tampering or destruction.
(2) You shall properly safeguard your account and passwords. You shall bear full liability for information security risks arising from poor custody or password leakage attributable to you.
(3) Please note that the internet environment is not absolutely secure. We will make every reasonable effort to protect your data but cannot guarantee absolute information security. We will notify you promptly and implement remedial measures in accordance with law if an information security incident occurs.

VII. Your Rights Over Personal Information

7.1

Subject to applicable laws, you enjoy the following rights with regard to your personal information:
(1) Right of access and rectification: You may log into your account to view and modify your email and other personal information in account settings; contact us for assistance if self-operation is unavailable.
(2) Right to deletion and account cancellation: You may apply for account cancellation. Upon cancellation, we will delete your personal information except data required to be retained by law. You may submit a cancellation request via the contact email, and we will process it within fifteen working days.
(3) Right to withdraw consent: You may withdraw your consent to data processing activities based on your authorization at any time. Withdrawal shall not affect the validity of data processing conducted prior to withdrawal.

7.2

You may exercise the above rights via the contact information specified in Clause XI, and we will respond and process your request within fifteen working days.

VIII. Cookies and Similar Technologies

8.1

We store necessary Cookie and similar technical data on your device to ensure normal website operation and optimize your experience.

8.2

Cookies are mainly used for the following purposes:
(1) Remember your login status, reading preferences and settings;
(2) Collect website access statistics and optimize page display;
(3) Secure your account.

8.3

You may manage, clear or disable Cookies via browser settings. Disabling Cookies may render partial functions unavailable and degrade your service experience.

IX. Third-Party Services and SDK Description

9.1

The Website integrates third-party tools and Software Development Kits (SDKs) to guarantee stable services and enable payment, statistics, security protection and other functions. Such SDKs collect necessary device and log data in accordance with their own rules to deliver corresponding features.

9.2

Full details of all SDKs integrated by the Website, including name, developer, collected data types, purposes and privacy policy links, are listed uniformly in the Appendix – List of Third-Party SDKs.

9.3

You are recommended to review the privacy policies of relevant third-party service providers before using the Services to understand their data processing rules. We only integrate SDKs when necessary and conduct strict security assessment and binding on all partners.

X. Updates to This Privacy Policy

10.1

We reserve the right to revise this Privacy Policy from time to time in response to business development, legal changes or service adjustments. Revised versions will be published on the Website with an updated effective date.

10.2

For material revisions (including core changes to data collection purposes, sharing rules or user rights), we will notify you via prominent website announcements.

10.3

Your continued use of the Services after the revised Policy takes effect shall constitute your acceptance of the updated Privacy Policy.

XI. Contact Us

11.1

If you have any questions, comments or suggestions regarding this Privacy Policy, or need to exercise your personal information rights, please contact us via:
Contact Email: contact@thelunanovel.com

11.2

We will respond and handle your request within fifteen working days upon receipt.

XII. Governing Law and Dispute Resolution

12.1

The formation, validity, interpretation, performance and dispute resolution of this Privacy Policy shall be governed by the laws of the Hong Kong Special Administrative Region of the People’s Republic of China.

12.2

Any dispute arising out of this Privacy Policy shall first be resolved through friendly negotiation. If negotiation fails, either party may submit the dispute to the Hong Kong International Arbitration Centre (HKIAC) for arbitration in accordance with its arbitration rules effective at the time of application. The seat of arbitration shall be Hong Kong; the arbitration language shall be Chinese; the arbitral award shall be final and binding on both parties.

Appendix 1: List of Third-Party SDKs

Name:
Developer:
Purpose:
Data Type:
Privacy Policy Link: