PRIVACY POLICY

1.Who we are and what this covers

Moon Roads is a commemorative program operated by Space Mobility, Inc., a Delaware corporation ("Space Mobility," "we," "us," or "our"). Space Mobility is the controller of the personal information described here.

This policy covers moonroads.com, the Adopt an Inch checkout, the certificates we issue, the Moon Roads register, and the emails we send about your adoption. It does not cover any other site we may link to, including spacemobility.com, or the payment pages operated by Stripe, which are governed by Stripe's privacy policy.

This policy sits alongside the Terms of Adoption. Where the Terms describe what a reservation is and what the register does, this policy describes what we do with your information.

2.Information we collect

What you give us at checkout

• The name you want on the certificate. This may be your own name or, as a gift, someone else's name with their permission.
• Your email address.
• The number of inches you are adopting.
• Your choice of whether to be listed as Anonymous in the public register.
• Your acceptance of the Terms of Adoption, and the version of the Terms in effect when you adopted.

What our payment processor gives us

Payments are processed by Stripe, Inc. Stripe collects your card or wallet details directly. We never receive or store your full card number. Stripe passes back to us:

• confirmation that the payment succeeded, and the amount and currency;
• the country associated with your payment;
• identifiers for the transaction, such as the Stripe checkout session and payment intent references, which we keep so we can match a refund or a support request to the right order.

What is collected automatically

• Spam protection. The adoption form uses Cloudflare Turnstile, which processes your IP address and signals about your browser to decide whether you are a human. It is a challenge system, not an advertising or profiling tool.
• Hosting and security logs. The site runs on Cloudflare. Cloudflare processes ordinary request information, such as IP address, timestamp, and user agent, to serve the page and to protect the site from abuse.
• Fonts. The page loads its typefaces from Google Fonts, which means Google receives your IP address when the fonts are fetched. We do not send Google anything else about you.

What we generate

When your payment completes we create an order record. It holds the information above plus the certificate number, the inches of Route 1 assigned to you, the date, a private link token that lets you re-open your certificate, and timestamps for the emails we sent you. Every later change to an order is written to an append-only change log, so that corrections to the register are auditable.

What we do not collect

We do not ask for your postal address, your date of birth, your phone number, or any government identifier. We do not run advertising, analytics, or social media trackers. We do not buy personal information about you from data brokers, and we do not build profiles or make automated decisions that produce legal or similarly significant effects.

3.How we use it

• To take your payment and complete your purchase.
• To issue your Certificate of Reservation and email it to you as a PDF, and to let you re-open or re-download it from the link in that email.
• To record your reservation in the Moon Roads register and to assign your inches along Route 1.
• To issue your Certificate of Completion, at no extra charge, if and when your portion of Route 1 is built.
• To handle refunds, name corrections, and support requests.
• To contact you about your adoption and about Route 1.
• To send you program news, updates on Route 1, new offerings, and promotional messages about Moon Roads and Space Mobility.
• To keep the register accurate and auditable, including the change log described above.
• To protect the site and the program from spam, fraud, and abuse.
• To meet our tax, accounting, and other legal obligations.

You can opt out of program news and promotional messages at any time, using the unsubscribe link in any marketing email or by emailing contact@spacemobility.com. Opting out does not stop the messages we send about a purchase, your certificates, or the register, which we keep sending as needed.

We may create and publish aggregated figures that do not identify anyone individually, such as the total number of adopters, the total length of Route 1 adopted, or the general distribution of adopters by country or region.

4.The public register

The Moon Roads register records every reservation of Route 1. When it is published, each entry shows the name on the certificate, or the word "Anonymous" if you chose that at checkout, together with the station and length of the reservation and the date it was adopted.

We never publish your email address, your payment details, your IP address, or your location.

As described in Section 10 of the Terms of Adoption, the register becomes public once a cumulative kilometre of Route 1 has been adopted, or sooner at our discretion. Until then it is held privately.

If your purchase is refunded, your reservation is released and your entry is removed from the register.

5.How we share it

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so.

We share it only in these situations:

• Service providers who run the program for us. Stripe processes payments. Cloudflare hosts the site, stores the order database and its backups, provides spam protection, and delivers our email. These providers act on our instructions and are bound by their own contractual and legal obligations.
• The public register, on the limited terms described in Section 4.
• When the law requires it, such as a valid legal process, or where disclosure is necessary to protect our rights, safety, or property, or those of others.
• A successor, if Space Mobility is involved in a merger, acquisition, financing, or sale of assets, in which case your information would remain subject to this policy or a successor policy that is no less protective.

6.Cookies and tracking

moonroads.com sets no advertising cookies, no analytics cookies, and no social media pixels. The site does not use browser storage to track you between visits.

Cloudflare Turnstile, the spam check on the adoption form, and Cloudflare's own security layer may set a cookie or similar identifier that is strictly necessary to confirm you are a human visitor and to protect the site. Stripe sets cookies on its own checkout page for fraud prevention and to make the payment work.

Because we run no tracking or advertising technologies, there is nothing here for a "Do Not Track" or Global Privacy Control signal to switch off. We honour such signals to the extent they apply, which in practice means our answer does not change: we were not selling or sharing your information in the first place.

7.How long we keep it

Order records are permanent. A reservation of Route 1 is a commemorative record that is meant to outlast any given year, and the register would not mean anything if entries could quietly vanish. Our database is deliberately built so that orders cannot be deleted and the change log cannot be edited. Please read Section 8 and Section 9 before asking us to erase an order, because there are limits on what we are able to do.

Other timeframes:

• Nightly backups of the order database and change log are written to private storage and kept so that we can recover from a failure. Anything you ask us to change is changed in the backups going forward, not retroactively in backups already written.
• Payment records are kept by Stripe under its own retention schedule, and by us for as long as tax and accounting law requires, which in the United States is generally at least seven years.
• Support correspondence is kept for as long as it is useful for handling your request and for our records.
• Security and request logs held by Cloudflare are kept on Cloudflare's own short retention schedule.

8.Your choices

• Be listed as Anonymous. Check the box on the order form and the register shows "Anonymous" instead of your name. Your certificate still shows the name you chose.
• Change your mind later. Email us and we will switch an existing entry to Anonymous. There is no charge and no limit on this.
• Correct the name. The Terms allow one name change per certificate, to reflect a legal change of name or to fix a misspelling. Write to us from the email address you used at checkout.
• Refund within 14 days. A refund releases the reservation and removes the entry from the register.
• Stop the marketing email. Use the unsubscribe link in any marketing email, or email us. We will stop the program news and promotional messages, and keep sending only what your purchase requires, such as a receipt, your certificates, or a notice about the register.

9.Your rights and how to use them

Depending on where you live, you may have some or all of the following rights. We extend the substance of them to every adopter, wherever they are, because it is simpler and fairer than sorting people by postcode.

• Know and access. Ask what we hold about you and get a copy.
• Correct. Ask us to fix information that is wrong.
• Delete. Ask us to delete your information, subject to the limits below.
• Portability. Ask for your information in a portable format.
• Opt out of sale, sharing, or targeted advertising. We do none of these, so there is nothing to opt out of.
• Non-discrimination. We will not treat you differently, charge you more, or give you anything less for exercising a privacy right.
• Withdraw consent, where we relied on your consent.
• Appeal. If we refuse a request, you may ask us to reconsider, and we will respond in writing.

The honest limits on deletion

We would rather tell you this plainly than bury it. If you ask us to delete your information:

• We will remove your name from the public register and list the entry as "Anonymous," remove your email address from our mailing use, and stop contacting you.
• We cannot delete the underlying order record. It is the register of record for a reservation of Route 1, our database blocks deletion by design, and we are separately required to keep transaction records for tax and accounting purposes. What remains is the certificate number, the inches assigned, the amount, and the date.
• Where the law gives you an enforceable right to erasure that is not overridden by our legal obligation to retain records, we will honour it to the fullest extent we are able and tell you exactly what we kept and why.

Making a request

Email contact@spacemobility.com from the address you used at checkout, or tell us enough for us to find your order, such as your certificate number. We do not ask for extra identification beyond what we need to be confident it is really you, and we will not use anything you send for verification for any other purpose. We aim to respond within 30 days, and we will tell you if we need longer. You may use an authorised agent, and we may ask for proof of their authority.

10.California privacy rights

This section is for California residents and is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act.

What we collect, and why

We do not collect sensitive personal information as the CPRA defines it, and so we do not use or disclose it for purposes requiring a right to limit. We do not collect biometric data, precise geolocation, government identifiers, or information about your health, beliefs, or union membership.

Sale and sharing

We have not sold, and do not sell, California residents' personal information. We have not shared, and do not share, it for cross-context behavioural advertising. We do not sell or share the personal information of anyone we know to be under 16.

Your California rights

You have the rights to know, access, correct, delete, and receive a portable copy, the right to opt out of sale or sharing, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising any of them. Section 9 explains how to make a request and what we can and cannot delete.

11.Other US state privacy rights

If you live in a state with a comprehensive consumer privacy law, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and a growing number of others, you have rights of access, correction, deletion, and portability, and the right to opt out of targeted advertising, sale, and certain profiling. We do not engage in targeted advertising, sale, or profiling. Section 9 explains how to make a request, and includes the appeal route those laws require.

If you live in Nevada, we do not sell personal information as Nevada defines it, and you may still submit a request to be excluded from any future sale.

12.Buyers outside the United States

Space Mobility is based in the United States and your information is processed there. If you are in the United Kingdom, the European Economic Area, or Switzerland, the following applies.

Our legal bases

• Performance of a contract. Taking your payment, issuing your certificate, recording your reservation, and handling refunds.
• Legal obligation. Keeping tax and accounting records.
• Legitimate interests. Keeping the register accurate and auditable, protecting the site from spam and fraud, securing our systems, and telling adopters about Route 1. We have weighed these against your interests and consider them proportionate given how little information is involved.
• Consent, where we ask for it, which you may withdraw at any time without affecting what we did before you withdrew it.

Transfers

Your information is transferred to and processed in the United States. Where required, those transfers rely on the European Commission's Standard Contractual Clauses and the UK Addendum, which form part of our agreements with Stripe and Cloudflare, together with the safeguards those providers maintain.

Complaints

You may lodge a complaint with your local supervisory authority, or with the Information Commissioner's Office in the United Kingdom. We would appreciate the chance to put things right first, so please do write to us.

13.Security

The site is served only over HTTPS. Card details never touch our systems. The order database and its nightly backups are held in private Cloudflare storage that is not publicly readable, and access to the administrative dashboards is limited to Space Mobility personnel and protected by multi-factor authentication. The change log is append-only, so an alteration to the register leaves a permanent trace.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information and the law requires us to tell you, we will, without undue delay.

14.Children

Adopt an Inch is for adults. You must be at least 18, or the age of majority where you live, to purchase. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, write to us and we will delete what we are permitted to delete and anonymise the rest.

15.Changes to this policy

We may update this policy. The version and effective date appear at the top of this page. If we make a material change to how we handle information we already hold, we will tell adopters by email before it takes effect.

16.Contact

Space Mobility, Inc.
Attn: Privacy
222 N Pacific Coast Hwy, Suite 2000, PMB 600
El Segundo, CA 90245
contact@spacemobility.com

Certificates are emailed from adopt@moonroads.com. Replies to that address reach us at contact@spacemobility.com.