MushroomSquad Privacy Policy

Effective date: 2026-07-19

MushroomSquad is a fan-made companion app that helps Pikmin Bloom players find each other for cooperative Mushroom Battles. This policy explains what information the app collects, why, and what happens to it. We have tried to write it in plain language, because we would rather you actually read it.

The most important things first

MushroomSquad never connects to or reads Pikmin Bloom. Everything in the app — your in-game name, your battle strength, whether a battle went well — is reported by people, not pulled from the game.
We show no ads and we do not sell your personal data.
This tester website uses no analytics trackers.

What we collect

When you use MushroomSquad, we collect:

Sign-in information. You sign in with a Google account through Firebase Authentication (sign-in is OAuth only). We receive your email address, display name, and an account identifier. We never see or store a password.
Your Pikmin Bloom In-Game Name. Self-reported by you. It is shown to the players you are matched with, so a Host can identify you in the game's invite list.
Your Friend Code. Self-reported. Shared with the Host of a Team-Up you are matched into, so they can send you an in-game friend request.
Mushroom-battle Power values. Self-reported figures, one per mushroom type, used to match you into suitable battles.
Your timezone and notification-window preferences. Which hours of the day you agree to receive battle invitations, and your IANA timezone so daily limits reset at your local midnight.
Push notification tokens. A Firebase Cloud Messaging (FCM) device token so the server can send you notifications.
Participation history and reviews. Which Team-Ups you took part in, the verdict filed for each match you helped with (SUCCESS, UNDERDELIVERED, or FAILED_TO_ATTACK), and your derived Good Review Rate, which is calculated over a rolling 90-day window.
Screenshot evidence. If a Host reports that a Helper underdelivered, they must attach a screenshot of the in-game battle screen as evidence. These screenshots are stored for enforcement review; they are not shown to other players.
Basic technical data. Ordinary server logs (such as IP address, request timestamps, and device/app information) generated when your app talks to our server, used for operating and securing the service.

What we do not do

We do not connect to, read, or modify Pikmin Bloom or your Niantic account.
We do not show advertising.
We do not sell or rent personal data to anyone.
We do not run third-party analytics or advertising trackers on this website.

Why we collect it

Matchmaking: matching Hosts who need battle help with Helpers who are ready right now, based on Power, notification windows, and review rate.
Reputation and enforcement: keeping the marketplace honest. Because we cannot see inside the game, reviews and screenshot evidence are how the community stays fair. Confirmed problems can lead to temporary matching freezes or, for repeated Host abuse, temporary bans.
Notifications: sending you battle invitations during the hours you chose, plus follow-up notices about battles you already joined.
Abuse prevention and service operation: rate limits, security, and debugging.

Where your data lives

The MushroomSquad server runs in Germany, behind Cloudflare, which provides content delivery and network protection. Authentication and push notifications are provided by Google Firebase, so that data is processed by Google under Google's Firebase privacy terms. All traffic between your device and our servers is encrypted in transit (HTTPS/TLS).

Who we share data with

Other matched players. When you are matched into a Team-Up as a Helper, the Host sees your In-Game Name, your Good Review Rate (or a "New" badge), and your Friend Code, so they can identify and invite you in the game. Helpers see the Host's In-Game Name and the battle details (such as mushroom type and Power Target). Ratings apply to Helpers only — Helpers do not rate Hosts, and Hosts have no equivalent rate. Screenshot evidence is never shown to other players.
Service providers (processors). Google Firebase (sign-in and push notifications) and Cloudflare (network delivery and protection). They process data on our behalf to run the service.
Legal requirements. We may disclose information if required to do so by law.

That is the complete list. There is no other sharing.

How long we keep it

Review verdicts feed a rating computed over a rolling 90-day window; older verdicts stop affecting your rate but may remain in your history and in enforcement records.
In-game friending is temporary by design: MushroomSquad's flow expects players to unfriend after a battle. (Friending happens inside Pikmin Bloom, which we do not control.)
Account and profile data is kept while your account exists.
Account deletion: you can request deletion of your account and associated personal data by emailing [email protected]. To be honest with you: during this testing phase deletion is handled manually on request — there is no in-app delete button yet.

Your rights

You can ask us to access, correct, or delete the personal data we hold about you by emailing [email protected].

Because our server is hosted in Germany, the EU General Data Protection Regulation (GDPR) applies to how we handle personal data. Under it you have rights of access, rectification, erasure, restriction, data portability, and objection, and the right to lodge a complaint with a supervisory authority. We serve players internationally (including Taiwan, Japan, Hong Kong, and Korea), and we apply the same practices to everyone regardless of where you live.

Children

MushroomSquad is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us at [email protected] and we will delete it.

Not affiliated with Niantic

MushroomSquad is an independent, fan-made companion app. It is not affiliated with, endorsed by, or connected to Niantic, Inc. or Nintendo. "Pikmin Bloom" and related names are trademarks of their respective owners.

Changes to this policy

If we change this policy, we will post the updated version at this URL with a new effective date. Material changes during testing will also be announced to testers.

Questions? Email [email protected].