Lunatechs

Privacy Notice

Last updated 27 July 2026

The short version

We hold your email, your name and handle, and what you do here — comments, reactions, what you've watched.
No analytics, no advertising, no tracking pixels. Not on the site, not in our emails.
Other members see your name, handle and anything you post. Who watched what is visible only to admins.
Email info@lunatechs.social and we'll delete your account and your data.

Lunatechs is a community of tech enthusiasts, with chapters in Hong Kong, Singapore, Los Angeles and Kuala Lumpur. This notice covers lunatechs.social and app.lunatechs.social.

What we collect

When you create an account

Email address and name. Either you type them, or — if you use "Continue with Google" — Google passes us your email, name and profile picture.
Your handle (the unique @name). If you don't choose one, we generate it from your name.
Password. Held by Amazon Cognito, not by us. We never see it.
Which chapters you follow.

What you add later

A photo or emoji avatar, a short bio, a status line, links to your socials — all optional, all removable by you at any time.

What you do here

Comments, edits (we keep the original text of an edited comment), reactions, likes and reports.
Which recordings you've opened, when, and how many times.
Requests for access to members-only content, and the decision on them.
Popstops you call or join, and anything you post to the talent board.

Technical

Server logs — IP address, browser, page requested, timestamp. Standard web-server records, kept short-term for security and debugging.
Two cookies. lt_id keeps you signed in across our sites and expires within about an hour. lt_hint is a flag that says "this browser has an account" so we don't show a sign-in prompt to someone already signed in; it lasts 30 days and holds nothing about you.
Your sign-in tokens live in your browser's local storage, and go when you sign out.

What we don't do. No Google Analytics or any other analytics. No advertising or remarketing tags. No tracking pixels in our emails — we can't tell whether you opened one. No selling or sharing your data with anyone for their own purposes. If that ever changes, this page changes first and we'll tell members.

Who can see what

Other members see your display name, handle, avatar, and anything you post — comments, reactions, popstops, talent listings.
View counts are shown to members ("6 members have watched"). The list of who watched is visible to admins only. That's deliberate: the count is a useful signal, and who watched what isn't anyone else's business.
Reports are private. Admins see that a comment was reported; nobody sees who reported it.
Admins can see member emails and chapter roles, to run the community.
The public sees nothing of yours unless you tick "show me in the member directory", which is off by default.

Automated moderation

Comments, display names and uploaded avatars are checked automatically before they appear, using Amazon Bedrock (an AWS service running Amazon's Nova models). The text or image is sent to AWS for the check and a yes/no answer comes back. AWS does not use content sent to Bedrock to train models.

We keep whether a comment passed the check. We do not keep the text of blocked comments — only a count, so we can tell when someone is repeatedly trying.

Who processes your data

Amazon Web Services — hosting, accounts (Cognito), the database, email delivery (SES) and moderation (Bedrock). Our data is stored in the US East (N. Virginia) region, so if you're in Hong Kong, Singapore, Malaysia or elsewhere, your data is transferred to and stored in the United States.
Google — only if you choose "Continue with Google", under Google's own privacy policy.
YouTube — recordings are hosted there and play in an embedded player. We use youtube-nocookie.com, and the player doesn't load until you press play, so nothing is sent to YouTube if you never start the video.
Luma — event registration, when an event links there.
Cloudflare / CDN and our web host — serving the site.

Emails we send

All of it is transactional — things that happen because of something you or someone else did: your verification code, a password reset, someone mentioning you in a comment, a decision on your access request. Admins additionally get notified of new sign-ups and reported comments. We don't run a marketing list from your account, and there are no tracking pixels in any of it.

How long we keep it

Your account and profile — until you ask us to delete it.
Comments and reactions — until you or an admin delete them. Deleting a comment hides it from the thread.
Server logs — short-term, for security and debugging.
A changed handle is held for 30 days so nobody can immediately take the name people associate with you.

Your choices

Change or remove your name, handle, photo, bio, socials and chapters any time in your account.
Delete everything. Email info@lunatechs.social from your account's address and we'll remove your account, profile, memberships and handle. Tell us if you also want your comments removed rather than left in place.
Ask what we hold about you, and we'll tell you.
Stay out of the directory — it's off unless you turn it on.

Depending on where you live you may have additional rights over your data — under Hong Kong's PDPO, Singapore's PDPA, or the GDPR if you're in the EU/UK. Write to us and we'll honour them.

Children

Lunatechs is for adults. Don't create an account if you're under 16. If we learn that an under-16 has one, we'll remove it.

Security

Passwords are handled by Amazon Cognito and never reach our servers. Members-only content is checked on every request rather than merely hidden. We're a small volunteer community, not a bank — we take reasonable care, and we won't pretend to guarantees we can't make. If you find a security problem, please tell us at info@lunatechs.social before telling anyone else.

Changes

If we change this in a way that matters, we'll update the date at the top and tell members.

Questions, or want your data gone: info@lunatechs.social