Privacy Policy & Cookie Disclosure — Hushroom

1. Overview & Commitment to Privacy

Welcome to Hushroom (https://hushroom.online). Hushroom is designed from the ground up as a privacy-first, no-account 3D virtual study hall and social simulation web game. You do not need to provide an email address, real full name, phone number, or password to use Hushroom.

This Privacy Policy explains what limited information is processed when you visit our website, customize your 3D avatar, join a public or private study room, and interact with third-party services including Google AdSense and Google H5 Games Ads. Last updated: October 29, 2026.

2. Information Stored Locally on Your Device (localStorage)

To remember your preferences between visits without requiring an account, Hushroom stores settings directly in your browser’s localStorage under the "st.*" namespace:

• Character & Profile (`st.profile`): Your chosen display nickname (up to 20 characters), encoded 3D avatar integer ID, selected country/flag, optional city label, and a randomly generated anonymous device identifier.

• Pomodoro Timer & Study Subjects (`st.timer`, `st.subjects`, `st.sessions`): Your timer rhythm configuration, custom study subject tags, and local timestamps of completed focus sessions used to calculate your personal 1-day, 7-day, and 30-day focus statistics.

• Audio, Weather & Safety Preferences (`st.sound`, `st.settings`, `st.perf`, `st.mutedUsers`, `st.blockedUsers`, `st.supporter`): Your volume level, weather override, frame-rate cap, muted/blocked user IDs, and Hall Supporter reward timestamps.

You can clear this data at any time by clearing your browser’s site data for our domain.

3. Multiplayer Room Presence & Ephemeral Break Chat

When you join a study hall or private room, Hushroom uses anonymous session authentication (via Supabase Realtime / anonymous auth) so other participants in the same room can see your 3D character, first name/nickname, country flag, seat number, and current study status (Focusing, On Break, or Away).

Break chat messages sent while on break are broadcast to participants currently in the same room and are automatically pruned from the client view after a short time window. We do not sell, rent, or publish chat logs or personal profiles.

4. Google AdSense, H5 Games Ads & Cookies Disclosure

To keep Hushroom free for everyone, we use Google AdSense and the Google H5 Games Ads Placement API (`adBreak()` and `adConfig()`) to serve non-intrusive advertisements at natural transitions (such as entering the study hall, starting a break after a focus block, or when you explicitly click to watch a rewarded break ad).

• Third-Party Vendors, including Google, use cookies (such as the Google DoubleClick DART cookie and AdSense cookies) to serve ads based on a user’s prior visits to this website or other websites on the internet.

• Google’s use of advertising cookies enables it and its partners to serve ads to our users based on their visit to Hushroom and/or other sites on the Internet.

• Users may opt out of personalized advertising by visiting Google Ads Settings (https://adssettings.google.com/authenticated) or by visiting www.aboutads.info (https://www.aboutads.info/choices/).

• For more details on how Google uses information from sites or apps that use its services, please visit https://policies.google.com/technologies/partner-sites.

5. Bot Protection & Security (Cloudflare Turnstile)

To protect public study rooms from automated spam and bots, we use Cloudflare Turnstile verification when joining rooms. Cloudflare may process standard network metadata (such as IP address, TLS fingerprint, and browser user-agent) strictly to verify that a request comes from a human browser.

6. GDPR (EEA/UK) & CCPA (California) Privacy Rights

If you reside in the European Economic Area (EEA), the United Kingdom, or Switzerland, we present a Google-certified Consent Management Platform (CMP) banner where required so you can manage consent for cookies and personalized advertising. Under the GDPR and CCPA/CPRA, you have the right to access, delete, or restrict the processing of your personal data, and to opt out of the sale or sharing of personal information for cross-context behavioral advertising.

Because Hushroom stores profile and timer history locally in your browser rather than in a centralized personal account database, you can delete your local profile immediately by clearing your browser storage.

7. Children’s Privacy

Hushroom is intended for general audiences (students, learners, and remote workers aged 13 and older) and does not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided personal data, please contact us at privacy@hushroom.online so we can remove it promptly.

8. Contact Us Regarding Privacy

If you have any questions about this Privacy Policy, our data practices, or cookie compliance, please contact us at privacy@hushroom.online or visit our Contact page.