LunaCue
Privacy & your media

Privacy Policy
隐私政策

Effective date / 生效日期: October 21, 2026

This policy describes the LunaCue media player and this website, operated by independent developer shiliang lian. Contact: pk0001988gpt@gmail.com.

中文摘要

LunaCue 使用你主动连接的媒体来源来浏览、整理和播放影片。Google Drive 仅请求只读权限,授权凭据存于设备钥匙串,文件目录、收藏和播放进度保存在本机。Google Drive 媒体由设备直接读取,不经 LunaCue 服务器代理;启用海报匹配或字幕搜索时,相关片名/搜索条件可能发送给对应服务。我们不出售 Google 用户数据,不将其用于广告或训练通用 AI 模型。你可以断开账号、在 Google 撤销授权,并联系我们处理隐私问题。下文说明各项处理和删除方式。

1. Information LunaCue accesses

When you open local files or connect a network source, the app processes the file names, locations, folder structure and media information needed to browse and play that source. The app stores library entries, favorites, preferences, metadata caches and playback progress on your device.

When you choose to connect Google Drive, Google presents its authorization screen. LunaCue requests drive.readonly, which permits reading your Drive files but not creating, modifying or deleting them. The app reads the account permission identifier, file and folder identifiers, names, sizes, modification times and other metadata needed for account binding, browsing, favorite-folder scanning and playback. Selected media bytes are read as needed for playback. You decide which folders to include in the library. LunaCue does not collect your Google password.

2. Purpose and use

Google Drive information is used to provide the visible media browsing, library organization, refresh and playback features you request. OAuth access and refresh tokens are used to maintain the connection to the account you authorized. LunaCue does not use Google user data for advertising, sale, credit decisions or training general-purpose AI or machine learning models.

LunaCue's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not permit human access to Google user data except with your affirmative agreement for specific support purposes, as necessary to address abuse or security, or as required by applicable law.

3. Storage, transmission and third parties

Google OAuth credentials are stored in the operating system Keychain on the device. Account references, directory-related library records, favorites and playback state are stored in the app's local application data. Google authorization and API communication use HTTPS. Google Drive media requests go from your device to Google; LunaCue does not relay those media files or Google OAuth tokens through its own server.

Online artwork and metadata matching can send a title derived from a media name and related search information to The Movie Database (TMDB). If you use online subtitle search, the title or release search terms, language and related identifiers are sent to LunaCue's subtitle service and its configured providers, such as OpenSubtitles and Wyzie. Those requests do not include your Google OAuth tokens or the media file itself. These optional online services also receive normal network information, such as an IP address. Their own privacy policies apply to their processing. A playback title can reveal what you watch; consider this before using online matching or subtitle search.

If you export a library sync file, it can contain media references and library activity; you choose where that file is stored or shared. Do not share it publicly if it contains private information.

4. Retention and deletion

Local library information and caches remain until removed through the app or deleted from the device. Removing a connected Google account deletes its locally stored account credential and account connection. Existing library records, progress or favorite references may remain on the device so that your library history is preserved; remove those records or the app's local data separately if you want to erase them. Disconnecting LunaCue does not delete the original files in Google Drive.

You can revoke LunaCue's Google access at any time in Google Account connections. Revocation prevents further authorized access; it does not automatically erase previously saved local records. If you send a support request, we retain the correspondence for handling and following up on that request; contact us to request deletion, subject to legal obligations. Server-side operational and security records are handled under the service's configured rotation and retention settings; this policy does not promise a fixed retention period that has not been implemented.

5. This website

This static website does not use advertising trackers, analytics scripts or cookies. Hosting and network infrastructure may process IP addresses, requested URLs, timestamps and technical request details to serve pages and maintain security. This website has no Google Drive login form and does not receive your Google Drive credentials.

6. Your choices and requests

You may choose not to connect a cloud account, use local media instead, exclude favorite folders from scanning, remove local records, revoke Google access or stop using the app. For access, correction, deletion or other privacy requests concerning information held by the developer, email pk0001988gpt@gmail.com. Do not send passwords, OAuth tokens or private media files. We may need limited information to verify and fulfill a request. Local-only data may need to be removed on your own device.

7. Security and changes

We use device credential storage and encrypted network connections for Google access. No system can guarantee absolute security. Material changes to this policy will be published on this page with an updated effective date. Questions can be sent to the developer at the contact address above.