Privacy Policy

Who We Are

MudMonster ("MudMonster", "we", "us", or "our") provides a mobile MUD (Multi-User Dungeon) client for iOS and Android and this companion community and discovery website. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the choices and rights you have.

If you have any questions about this policy or your data, contact us at support@codesquatch.com .

What We Collect and Why

Account information

When you create an account we collect your email address, a display name, and a securely hashed version of your password (we never store your password in plaintext). If you sign in with Apple or Google, we receive a verified email address and a unique identifier from that provider instead of a password. We use this information to create and maintain your account and to authenticate you.

Profile information

Your account may include a display name and an avatar. This information is used to represent you within the app and on community features such as reviews.

Cloud sync data (opt-in)

If you are signed in and enable cloud sync, we store the data needed to keep your experience consistent across your devices, including:

• Saved MUD connection records (connection name, host, and port).
• Per-connection settings such as triggers, aliases, timers, and variables.
• Character profiles.
• Terminal appearance and preference settings.
• Last-connected timestamps.

Cloud sync is optional. If you do not enable it, this data remains on your device.

Session logs (optional)

The app can optionally log your MUD sessions locally on your device. If you choose to enable syncing of session logs, those logs are stored on your account so you can access them across devices. You control whether logging and syncing are enabled and can delete logs at any time.

Community activity

MUD listings you submit, reviews you write, and votes you cast are associated with your account. Reviews and listings are publicly visible. We use this data to operate the community and discovery features of the platform. Aggregate vote totals are shown publicly, but your individual vote on a given MUD is not displayed publicly.

Support requests

When you contact support, we collect the subject, description, and the contact email you provide. We use this information solely to respond to and resolve your request. We do not use support correspondence for marketing.

Subscription and purchase data

If you purchase a subscription ("Mudborn" recurring) or a one-time contribution ("Helpings"), the purchase is made through Apple In-App Purchase and processed through our subscription management provider, RevenueCat. We receive your entitlement status (for example, whether a subscription is active) via RevenueCat webhooks. We do not receive or store your full payment card details; those are handled by Apple.

Technical and usage data

We process standard technical data (such as IP address, device or browser type, and request logs) for security, debugging, and abuse prevention. On the website we use a single session cookie — an httpOnly, Secure, SameSite=Strict token — to keep you signed in. We do not use tracking or advertising cookies.

We retain request and technical logs only as long as needed for these purposes and delete them within 90 days. We do not serve behavioural advertising, use tracking pixels, build advertising profiles from your data, or use third-party analytics SDKs that harvest data beyond our control.

MUD Connections Are Direct

When you connect to a MUD, the app opens a direct network (TCP) connection from your device to that third-party MUD server. The content, rules, and conduct on those servers are controlled by their operators, not by MudMonster. Any data you send to or receive from a third-party MUD server is governed by that server operator's own practices, not this Privacy Policy.

Legal Bases for Processing

Where applicable law (such as the EU/UK GDPR) requires it, we rely on the following legal bases to process your personal data:

• Performance of a contract — to create and maintain your account, provide cloud sync, and deliver the features you request.
• Legitimate interests — to secure the platform, prevent abuse and fraud, debug issues, and operate community features, balanced against your rights.
• Consent — for optional features you choose to enable, such as cloud sync and session-log syncing. You may withdraw consent at any time.

Third Parties and Processors

We share personal data only with service providers that help us operate the platform, and only to the extent needed. These include:

• Apple — App Store distribution, In-App Purchase processing, and Sign in with Apple.
• Google — Sign in with Google (and, if distributed there, Google Play).
• RevenueCat — subscription and purchase entitlement management.
• Hostinger + Resend — application hosting, database storage, and transactional email delivery (for example, account verification and password reset).

Each provider processes data under its own privacy terms. We do not sell your personal data, and we do not share it for third-party advertising.

How We Use Support Emails

Information you submit through a support request is used only to respond to and resolve that request. We do not add your support contact email to marketing lists or use it for any purpose unrelated to your inquiry.

Data Retention

We retain your account and synced data for as long as your account is active. If you delete your account, we purge the associated personal data within a reasonable period, except where we are required to retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Anonymised or aggregate statistics that do not identify you may be retained.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. You can update much of your profile and delete synced data directly within the app.

To request account deletion or to exercise any of these rights, email us at support@codesquatch.com . We will respond within the time required by applicable law.

Children

MudMonster is not directed to children under the age of 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

Security

We use industry-standard measures to protect your data, including hashed passwords, encryption of traffic in transit (TLS), short-lived signed authentication tokens, and access controls on our systems. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately to any incident.

International Data Transfers

We and our service providers may process and store your data in countries other than the one in which you live. Where personal data is transferred across borders, we take steps to ensure it is protected consistently with this policy and in accordance with applicable law, including using appropriate safeguards where required.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify registered users. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data? Email support@codesquatch.com .