1. Scope and operator
World Beneath Us operates this microscopy and visual-storytelling website at wbuo.com.au. Contact us at info@wbuo.com.au with privacy questions or requests. This policy covers the website and explains the separate, optional Luna Share Windows publishing application. The website does not ask visitors to connect a Google, TikTok, Meta or other social-media account.
2. Information we handle
- Visitors: you can browse without registering. If you like an observation, the website stores a random browser identifier and the IDs of the observations you liked. Website like totals are public; individual browser identifiers are not.
- Administrators: the database stores an administrator email, a one-way password hash, uploaded media, titles, descriptions, tags, credits and social links. Login sessions are protected by cookies.
- Security: the application temporarily stores keyed, hashed request identifiers and request counts to limit login abuse and like spam. Our hosting provider may separately record IP addresses, requested URLs, timestamps and user-agent information in access and security logs.
- Correspondence: when you email us, we receive the details you choose to provide and use them to respond.
We do not sell personal information, use visitor data for targeted advertising, or require social login to browse or like content on this website.
3. Cookies and external services
A session cookie supports form security and admin login. A random first-party like cookie is created when you use the like feature and is set to expire after one year. It is not a social-platform identifier. We do not install advertising or third-party analytics scripts in this implementation.
Administrator login uses Google reCAPTCHA v3 to help detect automated abuse. It may send device, browser and interaction information to Google and use cookies. Google’s Privacy Policy and Terms of Service apply. reCAPTCHA is loaded on the admin login screen, not automatically on the public gallery.
External films and social posts are opened as links; this website does not automatically embed social-platform players or tracking pixels. Following a link takes you to a separate service governed by its own policies.
4. Social platforms and the separate Luna Share app
Following or liking on this website does not authorize activity on YouTube, TikTok, Instagram, Facebook or another service. A website like is not transferred to those platforms. Use the original-post links to interact there.
Luna Share is a separate Windows desktop application. If you choose to connect a supported platform in that application, it uses the credentials and permissions you provide to upload the selected media and its title, description and tags. Its local history records file paths, fingerprints, destinations, timestamps, outcomes and remote IDs. The desktop application stores credentials encrypted for the current Windows account; this website does not receive or store those OAuth tokens.
Google / YouTube: Luna Share uses YouTube API Services for authorized video uploads and optionally renews access using a refresh token. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising or to train generalized AI models. Google’s Privacy Policy and the YouTube Terms of Service apply. You can revoke access through Google account permissions.
TikTok: the current Luna Share connector uploads selected videos to the authorized user’s TikTok inbox for review and completion in TikTok. It does not promise automatic public publication or website-to-TikTok likes. TikTok authorization, approval, API limits and its Privacy Policy apply.
Meta: the Instagram connector uses a professional account linked to a Facebook Page. Its local-image route may upload a temporary unpublished Page photo and request deletion after the Instagram attempt; pending cleanup is recorded locally. CDN copies may remain after deletion. Meta’s Privacy Policy applies.
5. Storage and retention
Website data is stored in the configured MySQL database and on the hosting account. Public media remains until an administrator removes it. Like records remain until removed using the control below, by an administrator, or when the associated observation is deleted. Rate-limit records expire after their configured short security window and are cleared opportunistically. Admin sessions expire after 30 minutes of inactivity or eight hours from login.
Desktop publishing history and credentials remain locally until you remove them. Uninstalling Luna Share preserves its data folder. Hosting logs, administrator backups and mailbox retention depend on the host or email service. Deletion from active storage may not immediately remove backup copies; contact us about a specific deletion request. Third-party platforms retain uploaded content under their own policies; removing a local record does not delete an already published post.
6. Your choices and requests
You can browse without using likes, clear browser cookies, and contact us to request access, correction or deletion of information we can identify. You may need to provide enough information to locate the relevant record and verify your request. Deleting the like cookie alone does not identify and remove older database records.
This removes the like records associated with the current browser identifier and expires that cookie. It does not remove social-platform likes or identify likes from another browser.
For Luna Share, remove a connection in Accounts, revoke authorization at the platform, and delete local history or the data folder if appropriate. Before deleting data, resolve pending uploads or cleanup. You may also email us for help with data requests or privacy complaints. We will assess the request and respond within a reasonable period. You may contact the Office of the Australian Information Commissioner where applicable.
7. Security and international services
We use access controls, password hashing, HTTPS, server-side validation and protected admin sessions. No system is completely secure. Your host and connected platforms may process information outside Australia. Review their policies before authorizing access or opening an external service. Do not send passwords, client secrets or access tokens by email.
8. Updates and contact
We may update this policy as the website or tools change and will update the effective date. Material new uses of authorized platform data require appropriate disclosure and any consent required by the relevant platform. Contact info@wbuo.com.au with questions.