Privacy policy

We keep this short because we collect very little. breathmoon has no user accounts, no advertising trackers, no analytics cookies and no newsletter sign-up at the moment.

1. Controller

Natovi OÜ, Valukoja tn 8/2, 11415 Tallinn, Estonia, registry code 17001951. Contact: hello@breathmoon.com.

2. Visiting the website (hosting)

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser sends technical data that the server needs to deliver it: IP address, date and time, page requested, browser type and operating system. Vercel processes this data on our behalf in server logs for security and error analysis and deletes it after a short period. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). Vercel is certified under the EU-US Data Privacy Framework; we have a data processing agreement with Vercel including the EU Standard Contractual Clauses.

3. Playing meditations (audio delivery)

Audio files are delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare R2). When you press play, your browser requests the audio file directly from Cloudflare, which processes your IP address and technical request data to deliver it. Legal basis: Art. 6(1)(b) GDPR (providing the service you request) and Art. 6(1)(f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework; we have a data processing agreement with Cloudflare.

4. Storage in your browser

The player remembers the background you chose (silence, nature or music) and where you stopped listening, so you can continue later. This information is stored only in your own browser (local storage), is never sent to us and contains no personal identifiers. It is strictly necessary for the function you use. You can delete it at any time in your browser settings. We do not set cookies.

5. Fonts

Fonts are served from our own server. No connection to Google or other font providers is made.

6. Contacting us by email

If you email us, we process your email address and message to answer you (Art. 6(1)(b) or (f) GDPR). Our email is provided by Google Ireland Ltd. (Google Workspace). We delete correspondence when it is no longer needed, unless we are legally required to keep it.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). To exercise them, email hello@breathmoon.com. You may also lodge a complaint with a supervisory authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the authority in your country of residence.

8. Changes

We will update this policy when we add new features (for example a newsletter or statistics). The current version is always on this page.

Version: 2026-10-26