Privacy Policy

Controller Details

Monte Lua is operated by Continual MI LLC, a United States company. Use the support contact below for privacy requests, account questions, billing support, and security reports.

What Data We Process

• Account identifiers such as Continual account ID, email address, display name, and avatar data provided by sign-in
• Saved universe state, player prompts, generated story beats, and collection progress
• Billing identifiers such as Stripe customer IDs, subscription records, credit purchases, wallet ledger entries, and webhook event records
• Support messages, cancellation requests, refund requests, and other account communications
• Technical diagnostics needed to secure the service and troubleshoot incidents

Why We Process It

• To create and maintain player accounts and saved universes.
• To generate and persist narrative simulation output requested by the player.
• To authenticate users and protect the service from abuse.
• To process payments, subscriptions, credit purchases, refunds, disputes, and billing support.
• To investigate incidents, security events, and harmful or defective outputs.

Legal Bases

• Performance of a contract when we operate the game, save universes, and fulfill paid entitlements.
• Legitimate interests for security, fraud prevention, incident review, and service improvement.
• Legal obligations for accounting, payment, consumer-law, and complaint-handling duties.
• Consent where a feature or future tracking technology specifically requires it.

Processors And Transfers

The service currently depends on the following processor categories and infrastructure providers:

• Continual account services for sign-in and authentication
• Stripe for checkout, subscriptions, payments, and billing records
• Configured content-generation provider for real-time story generation
• Azure Container Apps and Postgres infrastructure for hosting and runtime persistence

Narrative prompts and related runtime information may be sent to a configured content-generation provider so MDL can produce the next step, CG imagery, and gameplay output. Depending on where you are located, your information may be processed in the United States, the EEA, and other countries where we or our providers operate. If local law requires a specific transfer mechanism or safeguard, we will rely on the applicable legal mechanism for that transfer.

No Sale Of Personal Information

We do not sell personal information for money. We also do not intentionally share personal information for cross-context behavioral advertising. If that changes, we will update this policy and provide any opt-out or consent choices required by applicable law before using the data in that way.

Children

Monte Lua is intended for adults. We do not knowingly collect personal information from children under 13, and the public paid service is not intended for users under 18 unless a future launch flow provides the legally required parent or guardian permissions and safety controls for that region.

Retention

• Account and saved-universe data are kept while the account remains active and for a reasonable period afterward for security, backup, and support purposes.
• Billing, payment, refund, dispute, and tax records may be kept for as long as necessary to satisfy accounting, fraud-prevention, and legal obligations.
• Support submissions, abuse reports, and security logs may be retained for as long as reasonably necessary to investigate issues and protect the service.

Your Rights

• Access to your personal data
• Correction of inaccurate account information
• Deletion where the data is no longer needed or where applicable law gives you that right
• Restriction or objection where applicable
• Portability for data you provided to the service where applicable
• The right to complain to your local privacy regulator where applicable

Depending on your location, you may have additional privacy rights under applicable law. Until self-service export and deletion tooling is fully deployed, rights requests should be handled through the listed support contact. We may need to verify your account before fulfilling a request. If you are in the EEA, UK, or Switzerland, you may also lodge a complaint with your local data protection authority. California residents may also have the right to know, delete, correct, limit certain sensitive-data uses, opt out of qualifying sales or sharing, and be free from discrimination for exercising privacy rights.

Security

We use administrative, technical, and organizational safeguards designed to protect account, billing, and runtime data. No online service can guarantee perfect security, so players should use a secure sign-in method, protect their account credentials, and contact support promptly if they suspect unauthorized access.

Local Storage And Device Data

The current app stores some device-side preferences such as audio settings, collection state, last universe references, and review preferences in browser storage. If non-essential analytics or marketing technologies are added later, this notice and any required consent flows must be updated before deployment.

Changes To This Policy

We may update this policy as the service, providers, laws, or business operations change. The updated date at the top of the page shows when the current version was published. Material privacy changes will be handled with additional notice where required by law.