Privacy policy
1. Controller
INDI vl. Monika Kunstek, Draskovic 3 A-D, 42220 Novi Marof, Croatia, OIB 66987567542, e-mail info@1000x.gg, is the controller for personal data processed on 1000x.gg under the General Data Protection Regulation (GDPR).
2. Hosting and server logs
The site runs on a server located in the European Union (Madrid, Spain). When you open a page, the web server records your IP address, the requested address, date and time, browser type and the referring page in an access log. We use these logs to operate the site securely and to diagnose faults (legal basis: legitimate interest, Article 6(1)(f) GDPR). Logs are rotated and deleted after 14 days at the latest.
3. Measurement (Umami)
We measure how the site is used with our own software (Umami), running on our own server in Germany (IONOS, Berlin) — no third party, no resale of data, no advertising networks. The measurement script is delivered from this domain, the same way the rest of the page is, and it still loads no script from anyone else's server; fonts and images are likewise served from our own server. The measurement uses no cookies at all: some browser extensions that block trackers set a switch of their own to turn measurement off; otherwise nothing is stored in your browser at all. Signing in to a member account is unrelated and still sets the one strictly necessary session cookie described in section 7.
What we collect: the page you opened, the page that referred you, your rough origin (country and, where available, region and city), device type, browser and screen size, plus two events — clicking a link to Moon.com and clicking "Request payout" in the dashboard. No personal values travel with either event: no e-mail address, no member id, no Moon.com username, no amounts. How we tell one visit from another: a hash that changes every day, built from your IP address, your browser identifier and a secret the software holds. The IP is processed to build that hash but is not stored itself, so nobody stays recognisable past the day change and no tracking across other sites takes place (legal basis: legitimate interest, Article 6(1)(f) GDPR — we want to know which pages are actually read and whether the path from the homepage to an account works).
Objection: if "Do Not Track" is switched on in your browser, we do not count your visit at all — we respect that signal outright. You can also object at any time by writing to info@1000x.gg. The numbers we see are aggregated; we never link a member account to measurement data.
4. The live wins feed and the public trade pages
The start page shows recent winning trades on Moon.com. Our server reads Moon.com's public trade feed, keeps the last 30 winning trades and publishes them at /feed/trades.json with the Moon.com username, the market, the leverage and the profit of each trade. This data is already public on Moon.com; we process it to illustrate live activity on the platform (legal basis: legitimate interest, Article 6(1)(f) GDPR). The file holds only the last 30 wins and is overwritten continuously; the underlying trade rows are kept as described below. If you appear in the feed and want your username removed, write to us and we will filter it.
Two further pages go beyond that live feed: Moon Pulse (/pulse) and the daily trade archive (/trades, /trades/today and /trades/<date>). Both read the same source — Moon.com's public trade feed, collected from a live stream plus a slower walker that steps through Moon's bet numbers in order to catch what the live stream misses. Moon Pulse shows wins and losses alike, including the day's biggest win and biggest loss, each with the Moon.com display name attached; the archive pages name the day's biggest win only, and losses are counted there without a name. A trade closed anonymously on Moon carries no name on either page. We process this data for the same reason as the live feed above: to show real activity on the platform (legal basis: legitimate interest, Article 6(1)(f) GDPR).
The raw trade rows behind Moon Pulse and the archive are kept for 120 days and then deleted; the aggregated daily figures built from them — counts, totals, win rate, the day's biggest win and loss — stay after that so the archive keeps working. If you appear on any of these pages and want your Moon.com username removed, write to us and we will filter it, the same as for the live feed above.
5. Links to Moon.com
Links to Moon.com carry the crew's referral code so that Moon.com can attribute your account to the crew. What Moon.com collects when you open its site or create an account is governed by Moon.com's own privacy policy.
For every account opened through the crew's link or code, Moon.com's partner report shows the crew the Moon.com username, when the account was opened, its trading volume and the commission Moon.com has paid the crew for it. The report is read on the operator's behalf, normally once an hour, and delivered to our server. For a member who has linked their Moon.com account, we use it to confirm that the account came through the crew and to calculate the crew extra (terms, section 4): next to the Moon link we store the commission level of the first reading after linking, the level the extra has been booked up to, when Moon.com says the account was opened and when the report last listed it, and each booked step stays in our bookkeeping. Entries of accounts that are not linked to a member are discarded right after matching and not stored. For a newly linked account, and when an account cannot be matched, the operator is told by Telegram message with the Moon.com username, the member's e-mail address and the commission level. Legal basis: performance of the membership (Art. 6(1)(b) GDPR) for linked members, and our legitimate interest in matching the report to members (Art. 6(1)(f) GDPR) for reading the list as a whole.
6. Contact by e-mail and the support chat
If you write to us — by e-mail or through the support button on this site — we process what you send to answer you (Article 6(1)(b) and (f) GDPR) and delete the conversation once the matter is closed, unless we must keep it under commercial or tax law.
A message from the support button is stored in our database together with the e-mail address we answer to (your account address if you are signed in, otherwise the one you enter), the page you wrote it on and, if you are not signed in, a one-way hash of your IP address that we use only to limit abuse; the IP address itself is never stored. So that we can answer quickly, the message, that e-mail address and the state of your Moon link are forwarded to the operator's account on the messaging service Telegram, and our answer comes back from there — to this site and by e-mail. If you are not signed in, a cookie that only the support function can read keeps your conversation together for up to 180 days; it is set only when you send a message. Members' support messages are deleted together with their account.
7. Member accounts
When you create a crew account we store your e-mail address, a salted hash of your password (never the password itself), the time you confirmed your age and accepted the terms, the sessions you sign in with (session token, creation and expiry time, IP address and browser type) and, for rate limiting, short-lived counters per IP address. Legal basis: performance of the membership agreement (Article 6(1)(b) GDPR) and our legitimate interest in preventing abuse (Article 6(1)(f) GDPR). You can delete your account at any time from the dashboard: that removes the account itself, your Moon link and your sessions. Payout records stay in our books without your e-mail address (the Moon username, the amount and the date remain) because we must be able to show what was paid out. Sessions expire after 30 days of inactivity.
8. Your rights
You have the right to access the personal data we hold about you, to have it rectified or erased, to restrict or object to its processing, and to receive it in a portable format. You can also lodge a complaint with a supervisory authority, for example the Croatian Personal Data Protection Agency (AZOP) or the authority of your country of residence. To exercise your rights, write to info@1000x.gg.
9. Changes
We update this policy when the site changes. The version and date at the top tell you which version applies.