MushroomSquad Privacy Policy

Effective date: 2026-08-11

MushroomSquad is a fan-made companion app that helps Pikmin Bloom players find each other for cooperative Mushroom Battles. This policy explains what information the app collects, why, and what happens to it. We have tried to write it in plain language, because we would rather you actually read it.

The most important things first

MushroomSquad never connects to or reads Pikmin Bloom. Everything in the app — your in-game name, your battle strength, whether a battle went well — is reported by people, not pulled from the game.
We show no ads and we do not sell your personal data.
This tester website uses no analytics trackers.

What we collect

When you use MushroomSquad, we collect:

Sign-in information. You sign in with a Google account through Firebase Authentication (sign-in is OAuth only). We receive your email address, display name, and an account identifier. We never see or store a password.
Your Pikmin Bloom In-Game Name. Self-reported by you. It is shown to the players you are matched with, so a Host can identify you in the game's invite list.
Your Friend Code. Self-reported. Shared with the Host of a Team-Up you are matched into, so they can send you an in-game friend request.
Mushroom-battle Power values. Self-reported figures, one per mushroom type, used to match you into suitable battles.
Your timezone and notification-window preferences. Which hours of the day you agree to receive battle invitations, and your IANA timezone so daily limits reset at your local midnight.
Push notification tokens. A Firebase Cloud Messaging (FCM) device token so the server can send you notifications.
Participation history and reviews. Which Team-Ups you took part in, the verdict filed for each match you helped with (SUCCESS, UNDERDELIVERED, or FAILED_TO_ATTACK), and your derived Good Review Rate, which is calculated over a rolling 90-day window.
Screenshot evidence. If a Host reports that a Helper underdelivered, they must attach a screenshot of the in-game battle screen as evidence. These screenshots are stored for enforcement review; they are not shown to other players.
Postcards (美片菇). If you attach a photo to a Team-Up you host, it is scanned automatically before publication (see processors below) and then shown to the players invited to that Team-Up. A published Postcard is served from a public address, so treat it as public. Do not upload anything you would not want a stranger to see.
Basic technical data. Ordinary server logs (such as IP address, request timestamps, and device/app information) generated when your app talks to our server, used for operating and securing the service.

What we do not do

We do not connect to, read, or modify Pikmin Bloom or your Niantic account.
We do not show advertising.
We do not sell or rent personal data to anyone.
We do not run third-party analytics or advertising trackers on this website.

Why we collect it

Matchmaking: matching Hosts who need battle help with Helpers who are ready right now, based on Power, notification windows, and review rate.
Reputation and enforcement: keeping the marketplace honest. Because we cannot see inside the game, reviews and screenshot evidence are how the community stays fair. Confirmed problems can lead to temporary matching freezes or, for repeated Host abuse, temporary bans.
Notifications: sending you battle invitations during the hours you chose, plus follow-up notices about battles you already joined.
Abuse prevention and service operation: rate limits, security, and debugging.

Where your data lives

The MushroomSquad server runs in Germany, behind Cloudflare, which provides content delivery and network protection. Authentication and push notifications are provided by Google Firebase, so that data is processed by Google under Google's Firebase privacy terms. Images you upload are scanned by Microsoft Azure AI Content Safety before they can be published. All traffic between your device and our servers is encrypted in transit (HTTPS/TLS).

Who we share data with

Other matched players. When you are matched into a Team-Up as a Helper, the Host sees your In-Game Name, your Good Review Rate (or a "New" badge), and your Friend Code, so they can identify and invite you in the game. Helpers see the Host's In-Game Name and the battle details (such as mushroom type and Power Target). Ratings apply to Helpers only — Helpers do not rate Hosts, and Hosts have no equivalent rate. Screenshot evidence is never shown to other players.
Service providers (processors). Google Firebase (sign-in and push notifications), Cloudflare (network delivery, TLS, and protection against abuse), and Microsoft Azure AI Content Safety (automated scanning of images you upload, before anyone else can see them). They process data on our behalf to run the service; none of them may use it for their own purposes.
Legal requirements. We may disclose information if required to do so by law.

That is the complete list. There is no other sharing.

How long we keep it

Review verdicts feed a rating computed over a rolling 90-day window; older verdicts stop affecting your rate but may remain in your history and in enforcement records.
In-game friending is temporary by design: MushroomSquad's flow expects players to unfriend after a battle. (Friending happens inside Pikmin Bloom, which we do not control.)
Account and profile data is kept while your account exists.
Postcard images have their own limits, and none of them is indefinite. An image you started uploading but never finished is discarded after about 48 hours. An image awaiting a moderation decision is kept up to about 14 days, and a rejected one for about 7 days after that. An approved image you never attached to a battle expires after about 14 days. A published image is removed about 7 days after the battle it belongs to ends, and in any case no more than about 60 days after it was published. A copy quarantined by moderation is kept about 14 days if nobody ever ruled on it, or about 7 days after a ruling. The moderation record itself is deleted after about 6 months, or — where a rule violation was confirmed — kept in a reduced, anonymized form. Material we are legally required to preserve (for example a report to the authorities) is exempt from these windows and is kept as long as the law requires.
Account deletion: you can delete your account yourself, from inside the app: Profile → Account → Delete account. It takes effect immediately and permanently — there is no grace period and no undo. You leave any Team-Up you are in, any battle you are hosting that has not happened yet is cancelled, and the images you uploaded are deleted (except any material under the legal hold described above). Your battle history stays without your name attached, as an anonymous placeholder, because other players' Team-Ups and reviews have to remain accurate. If you cannot reach the app — for example you are locked out of your sign-in account — email [email protected] and we will handle it for you; emailed requests are processed within 30 days, as data-protection law requires.

Your rights

You can delete your account at any time from inside the app (Profile → Account → Delete account). For everything else — access to, a copy of, or correction of the personal data we hold about you — email [email protected]; those requests are handled by a person, within 30 days. Deleting your account does not produce a copy of your data, so ask for one first if you want it.

Because our server is hosted in Germany, the EU General Data Protection Regulation (GDPR) applies to how we handle personal data. Under it you have rights of access, rectification, erasure, restriction, data portability, and objection, and the right to lodge a complaint with a supervisory authority. We serve players internationally (including Taiwan, Japan, Hong Kong, and Korea), and we apply the same practices to everyone regardless of where you live.

Children

MushroomSquad is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us at [email protected] and we will delete it.

Not affiliated with Niantic

MushroomSquad is an independent, fan-made companion app. It is not affiliated with, endorsed by, or connected to Niantic, Inc. or Nintendo. "Pikmin Bloom" and related names are trademarks of their respective owners.

Changes to this policy

If we change this policy, we will post the updated version at this URL with a new effective date. Material changes during testing will also be announced to testers.

Questions? Email [email protected].