What we collect, and why.

Who we are

• ToTheMoon (Pty) Ltd, a company registered in South Africa (no. 2024/203943/07), runs Langrove and decides how this data is used.
• Write to privacy@tothemoon.build about anything on this page.

On every visit

• Our host handles your visit. Amazon Web Services sends each page from the location nearest you. To do that, and to block attacks, it receives your IP address and browser details. We keep these logs only as long as we need them for security and fixing faults. Our legal basis is our legitimate interest in running a safe, working site.
• Nothing loads from anyone else. Fonts and scripts come from this site, not from Google or any other third party.
• Your cookie choice is remembered in your browser for six months, so we don't ask again. It never leaves your device.
• "Send this to IT" stays on your device. It copies a note to your clipboard; nothing is sent to us.

Only if you say yes: Microsoft Clarity

Clarity shows us how people use this site, as heatmaps and replays of visits, so we can see what is unclear. It doesn't load until you choose Accept. Right now it is off for you. Change your choice

• What it records: the pages you view, clicks, scrolling and mouse movement, your screen size, browser and device, and a rough location worked out from your IP address. This site has no forms, so there is nothing typed to record.
• Who receives it: Microsoft, which runs Clarity. We tell Clarity you have not agreed to advertising cookies. Read Microsoft's privacy statement.
• How long: Clarity keeps recordings for 30 days and its reports for up to 13 months.
• Our basis: your consent. Withdraw it any time with Cookie settings at the foot of the page; Clarity stops and its cookies on this site are deleted.

When you request early access

• What we collect: your work email address, your name and company if you give them, and a record of when you sign in to the console.
• Why: to create your account, decide whether to approve your company, and contact you about setting it up. Our legal basis: you asked us to take these steps before any agreement with us.
• Giving us these details is up to you, but without a work email we can't set up early access.
• The console sets one kind of cookie, to keep you signed in. Sign-in cannot work without it, so it needs no consent.
• How long: while you have an account. If your company isn't approved, or you don't go ahead, we delete your details after 12 months, or sooner if you ask.
• If you email us, we use your message and address to reply, and keep them as long as dealing with it needs.

Cookies and browser storage

Who receives it, and where

• Our hosting and email providers, including Amazon Web Services, to run this site and the console and to send sign-in emails. They act only on our instructions.
• Microsoft, for Clarity, and only if you accept.
• Where it's kept: in Europe, which is outside South Africa and protected by the GDPR. Our providers may also handle it elsewhere, including in the United States. When they do, they're either certified under the EU-US Data Privacy Framework or bound by contract terms the EU and UK approve (standard contractual clauses).
• We don't sell your data, use it for advertising, or make decisions about you by automated means alone.

Your rights

• You can ask for a copy of your data, and ask us to correct it, delete it, limit how we use it, or hand it to you in a form you can take elsewhere.
• You can object to anything we do because of our legitimate interests. You can also withdraw your consent at any time.
• Write to privacy@tothemoon.build and we'll answer within one month.
• You can also complain to a data protection authority. Ours is South Africa's Information Regulator, at POPIAComplaints@inforegulator.org.za. If you live in the UK or EU, you can also complain to the authority there.
• These rights come from South Africa's privacy law (POPIA) and, if you're in the UK or EU, the GDPR.
• When what we collect changes, we update this page and the date at the top.