Privacy Policy

1. Who we are

NullStateLab is operated by Junki Doi in Japan. This Policy applies to our AI services, NULLGAME accounts and games, Mofumaro, Mofumaro Plaza, Mofumaro Desktop, and related websites. Contact: admin@nullstate-lab.com.

2. Data we collect

• Account and contact data: name or nickname, email, password hash, email verification and sessions, age-condition confirmation, Terms and Policy acceptance time and version, notices, identity checks, and support messages. A date of birth entered during NULLGAME registration is used transiently to determine whether the user is at least 13 and is not retained as profile data.
• Technical and security data: IP address, access time, referrer, browser, device and OS type, cookies, session identifiers, error and security logs, and Cloudflare security signals.
• AI service inputs: age, gender, height, weight, optional target weight, activity, food preferences, exclusions, and allergy information for Mushin Diet or Daily Plate.
• NULLGAME and Mofumaro data: balances and purchase history, game progress, pet type, appearance and name, care, growth, personality, mood, relationships, memory, routines, reactions, inventory, subscription status, renewal or plan changes, and saved-game records.
• Mofumaro Plaza data: avatar and selected colours, server, in-world coordinates and facing direction (not real-world GPS location), connection state, accompanying pets, pet interactions and memories, global chat, whispers, friends, blocks, reports, relevant messages visible when a report is made, and avatar or Plaza item purchases, ownership, placement, and use.
• Payments: Stripe customer, subscription, Checkout Session, Payment Intent, product, billing, cancellation, refund, delivery, and entitlement records. Stripe processes card details directly; we do not store full card numbers or security codes.

3. Mofumaro Desktop microphone data

Microphone access is off unless you enable it. Volume activity is analysed locally so a pet can react; NullStateLab does not record, retain, or upload raw microphone audio. If you separately enable speech recognition, the operating system or browser's Web Speech provider may process audio under that provider's terms. The app temporarily receives a short recognised phrase and classifies it locally into simple intents such as greeting, food, play, or praise. NullStateLab servers do not store the raw audio or recognised phrase.

4. Why we use data

• To register users, authenticate sessions, deliver AI content, save game state, and provide customer support.
• To operate Mofumaro personality, memory, care, Desktop reactions, Plaza presence, social features, and shared item effects.
• To process payments, renewals, cancellations, refunds, virtual balances, item grants, and entitlement recovery.
• To display user-chosen public information, deliver whispers, process blocks and reports, investigate abuse, and protect users and the Service.
• To prevent fraud, cheating, unauthorized access, payment abuse, and security incidents; comply with law; and resolve disputes.
• To improve reliability and features using aggregated or de-identified analysis where practical.

We do not sell personal information and do not use personal data for third-party behavioural advertising.

5. Public and limited-audience information

Your nickname, avatar, accompanying pets, global chat, and other information marked for public game display may be visible to other users. Whispers are shown only to the selected recipient, but related messages between the reporter and reported user may be retained and reviewed for safety when a report is submitted. Do not post addresses, phone numbers, email addresses, payment details, or other information you do not want disclosed.

6. Service providers and international processing

We disclose data only as needed to service providers acting for us, with your consent, or where law or urgent safety requires it. Providers may include Cloudflare for hosting, D1, delivery and security; Stripe for payments and subscription management; Resend and Google Workspace for email and operations; OpenAI for specified AI generation; and Anthropic for AI processing within the scope of your consent.

These providers may process information outside your country. We use access controls, contractual and technical measures, and provider review appropriate to the data and applicable law. Each provider also processes data under its own terms and privacy policy.

7. Retention

We aim to delete or de-identify ordinary profile data within 180 days after account closure or service completion when it is no longer needed. In Mofumaro Plaza, live presence normally expires 90 seconds after the last sync; ordinary chat is normally retained for 1 day; and report evidence may be retained for up to 180 days. A pet's ordinary memory of another Plaza participant normally fades 90 days after the last meeting, while relationships that reach a permanent in-game friendship stage may remain with the pet save.

Payment, tax, consent, security, fraud, dispute, moderation, entitlement, ownership, and balance-integrity records may be retained longer where reasonably or legally necessary. Backup or report copies may remain for the limited period required to complete those purposes.

8. Cookies and local storage

Mofumaro browsing and play analytics older than 180 days are removed by scheduled cleanup. Anonymous aggregate metrics and records required for transactions and billing are excluded. Presence disappears from the list 90 seconds after the last sync; expired plaza records are removed by scheduled cleanup. Mofumaro care records are not deleted just because a subscription ends. They are deleted when the user confirms farewell.

We use essential cookies for login, security, subscription and entitlement checks. Cloudflare may set technical security cookies. Some games use local storage to retain settings or progress on the device. Mofumaro Desktop stores display and microphone preferences locally. We do not place advertising cookies or use Google Analytics. We do use our own NULL Analytics to improve the service and investigate problems, recording page views, referrals, game starts and usage time, interactions with purchase links, and errors. Browser local storage holds an anonymous identifier, session information, and unsent events. Identifiers and events are sent to our analytics service. The anonymous identifier remains until browser data is cleared; sessions rotate after 30 minutes of inactivity. Measurement stops when the browser enables Do Not Track or Global Privacy Control.

9. Security

We use password hashing, access controls, least-privilege administration, secure session cookies where supported, provider security controls, and monitoring intended to protect information. No online service can guarantee absolute security. If a breach requires notice under applicable law, we will investigate, mitigate, and notify affected users or authorities as required.

10. Children and minors

NULLGAME and Mofumaro Plaza are not intended for children under 13, and we do not knowingly collect their personal information. If we learn that an under-13 account has provided personal information, we may restrict the account, seek appropriate guardian confirmation, or delete the information as required. Minors must obtain parent or guardian permission before purchasing. This does not limit legal cancellation or consumer rights.

11. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or information about disclosure and processing. You may also close an account, stop subscription renewal, block another user, disable microphone functions, or withdraw optional permissions through the relevant interface. We may verify identity and may retain data that law, security, payment integrity, or dispute handling requires.

12. Changes and contact

We will post the effective date of updates and give advance notice of material changes where required. For privacy requests or questions, email admin@nullstate-lab.com. We normally respond within 2 business days, excluding Japanese public holidays.