Last updated 3 July 2026.
Mushroom Capital is made by Such Software ("we", "us"). This policy explains what we collect, why, who processes it, and the choices you have.
| Data | Why | Required? |
|---|---|---|
| Anonymous device ID (a random UUID we generate on first launch) | Save your terrarium and sync progress; tie together anonymous analytics for one install | Yes |
| Game state (capital, mushrooms, upgrades, prestige, cosmetics, decor, settings) | So your game persists across sessions and devices | Yes |
| A short display name and a 6-character friend code — only if you use the social features | Let friends add and recognize you. The name is capped at 16 characters and can be changed anytime | Only if you go social |
| Social content you create from our built-in set — friend connections, your published room snapshot, canned notes/messages, reaction stamps, and gift records — only if you use the social features | Power visiting, messaging, reactions, and gifting between friends (see "Social features" below) | Only if you go social |
| Activity records — validated Sporeway evidence/ghost challenges and Derby lobby membership, built-in action timeline, avatar look, distance, and standings | Validate runs, match optional races, resolve results, and render synchronized replays | Only if you play an online activity |
| Moderation report records (the reporter's and reported user's IDs, the surface, and a reason code) — only if you or someone else files a report | Keep the community safe; investigate and act on abuse; meet our safety and legal obligations | Only if a report is filed |
| In-app purchase records (product ID, transaction ID, entitlements) — only if you buy something | Deliver & restore purchases and prevent fraud | Only if you purchase |
| Aggregate gameplay events (e.g. first harvest, first prestige) tied to your device ID, plus an A/B test bucket | Understand which features are used; balance and improve the game | On by default; see "Your choices" |
| Crash and error diagnostics (device model, OS version, stack traces) | Find and fix bugs | On by default |
| Approximate IP address (in server request logs) | Security, abuse prevention, and operating the service | Yes, transient |
| Linked account (Google / Apple / email) — optional | Only if you choose to link, for cross-device recovery | No |
| Push notification token — optional | Only if you opt in to reminders | No |
We do not collect your real name, email address, phone number, contacts, photos, or precise location. Accounts are anonymous by default — a name, if you set one, is a short display handle you choose, not your legal name.
The social layer is optional — you only take part if you open the Friends panel and accept the in-app Content Policy. If you never do, none of the data in this section is created. Social is asynchronous: friends view a saved snapshot of your room, not a live feed of you, and there is no real-time chat.
The guiding rule is that only pre-approved, built-in content ever passes between players — never anything you type or upload. Here is exactly what that means for your data:
Downtown activities are optional and separate from the friend/social graph. A Derby player may choose a private invite or an open, bounded race queue. Open matching can place you in a 2–8 player lobby with people who are not friends. Lobby members see the short display name, selected catalog avatar look, lane, submission state, built-in action timeline, and final result needed to run and replay that race. There is no stranger profile directory, direct message, free text, voice, upload, or access to another player's terrarium.
Derby shared replay rows are retained for up to 7 days; private result rows for up to 30 days. Acknowledgement may remove shared state earlier. Deletion replaces your identity and removes your action timeline from bounded shared Derby history.
Every place where you can see another player's content (a visited room, a friend, a message) has Report and Block. When someone files a report, we store a small record: the ID of the person who reported, the ID of the reported user, which surface it was, and a short reason code. Reports do not contain free text and are never shown to the reported user. A person reviews reports and can hide or remove reported content and act on the account.
We keep moderation report records even after a reported (or reporting) user deletes their other data, because we have a legitimate interest in keeping the community safe, preventing repeat abuse, and meeting our safety and legal obligations. These records are minimal — just user IDs and a short reason — and are not used for advertising or any other purpose. Where the law gives you the right to object to this processing, you can contact us and we'll consider your request.
We use Google Firebase Analytics (GA4) to understand, in aggregate, how
the game is played — which features are used, where players get stuck, whether a change
helped. Events are tied only to your anonymous device ID and an A/B test
bucket; they contain no name, email, phone, or precise location, and we do
not use Apple's advertising identifier (IDFA) or show an App Tracking
Transparency prompt. Firebase Analytics feeds a shared studio project
(suchsoftwareapps) that Such Software uses across its apps, and analytics data
flows into Google BigQuery for us to query in aggregate. We also collect
crash and error diagnostics (device model, OS version, stack traces) to fix bugs. You can
turn analytics and diagnostics off in Settings.
Mushroom Capital may offer optional, opt-in rewarded ads (you tap "Watch ad" to earn an in-game reward — never forced, never interstitial). Ads are served by Google AdMob in non-personalized mode: they're not targeted using a cross-app advertising identifier. This is separate from our own analytics, which never use an advertising identifier. To show and frequency-cap the ad itself, Google's AdMob SDK may receive your device's advertising identifier and approximate (IP-based) location; in non-personalized mode these are used only to serve and cap that ad, not to build a cross-app profile of you. Where required (EEA / UK), we show Google's consent form before any ad loads. If a release doesn't include ads, none of this applies.
suchsoftwareapps project) and Crashlytics (crash diagnostics), plus Google BigQuery for aggregate analysis.These providers process data under their own terms and privacy policies, as our processors or (for the app stores and ad network) as independent controllers for their part. We share only what each service needs to do its job, and we don't sell your data.
In-app export & delete. From inside the game you can export your core account data — your terrarium save, purchase/economy history, and A/B test assignment — and permanently delete your account and data (the Friends panel offers "Delete my account & data"). For a full copy that also includes your social data (published room snapshot, friend connections, and inbox contents), email us below and we'll provide it. Deleting cascades: it erases your terrarium save, A/B bucket, economy history, and all your social objects — your published room snapshot, friend code, friend connections, blocks, and inboxes — and it scrubs your reactions, messages, and gift notes out of your friends' inboxes so your ID doesn't linger there. Moderation report records are the one exception and are retained for the safety reasons described above.
By email. You can also request a copy or deletion of your data by emailing hello@mushroom.capital. Because accounts are anonymous, include the in-game device ID shown in Settings so we can find your save. We complete deletion requests within 30 days.
We honor the GDPR, UK GDPR, CCPA/CPRA, and equivalent regional rights (access, correction, deletion, portability, and objection). You can turn off analytics/diagnostics collection in Settings, and disable push notifications at any time in your OS settings.
Mushroom Capital is intended for players 13 and older. We do not knowingly collect personal information from children under 13, and we do not knowingly show behavioral (personalized) advertising to children — any ads in the game are non-personalized. If you believe a child under 13 has provided us data, contact us and we'll remove it.
We may later add features such as a shared "lobby" where players walk around as mushroom avatars. Any such feature will keep the same posture described here: only pre-approved, built-in content between players, no free text, and no user uploads. If we ever change that, we'll update this policy first.
If we make material changes to this policy, we'll update the date above and, where appropriate, notify you in-game.
Privacy questions: hello@mushroom.capital
Security / vulnerability reports: security@mushroom.capital