NookBloom

Privacy Policy

Last updated: October 2, 2026

This policy explains how NookBloom ("we") collects, uses and protects your data when you play NookBloom: Cozy Garden (the "game") on the web and in the Android/iOS apps.

1. Data we collect

  • Account information: your email, the display name you choose and your password (stored only as a one-way hash that we cannot read).
  • Gameplay data: your gardens, plants, decorations, inventory, coin/gem balances and in-game transaction history, missions, events, gacha pulls, friends, garden visits and gifts.
  • Technical data for security: the IP address and browser/device information (user-agent) of each sign-in session.
  • Push notifications (only if you allow them): your device notification token (Firebase Cloud Messaging), language and time zone, so we can notify you at the right time and in your language.
  • Essential cookies: sign-in, language and time zone cookies. We do not use advertising or tracking cookies.

We do not collect your location, contacts, photos, microphone, camera or payment data. The game has no ads and uses no third-party analytics or tracking tools.

2. How we use it

  • To create and manage your account and keep your progress.
  • To provide the game features, including social features (friends, garden visits, gifts).
  • To send the notifications you enabled: energy refilled, friends tending your garden, gifts received, events ending soon. None are sent at night.
  • To keep accounts secure and prevent cheating and abuse.
  • To reply when you contact support.

3. Who can see your data

  • Other players: your display name and gardens (when they search for you, add you as a friend or visit your garden). Your email is never shown to other players.
  • Service providers processing data on our behalf: our game servers host, and Google Firebase Cloud Messaging, which delivers push notifications to your device.
  • Authorities, when required by law.

We do not sell or rent your personal data.

4. Storage and security

All connections to the game are encrypted (HTTPS). Passwords and session tokens are stored only as hashes. Only authorised administrators can access data, and every admin action is logged.

We keep your data for as long as your account exists. Sign-in sessions expire when unused. When you delete your account, your data is removed from our systems immediately and from our periodic backups within 8 days.

5. Your rights

  • See your gameplay data directly in the game.
  • Delete your account and all of its data at any time: in the game go to "My gardens" → "Delete account", or follow the steps on the Delete account page.
  • Turn off push notifications in your device settings.
  • Ask for a copy, correction or deletion of your data by emailing nookblom.studio@gmail.com.

6. Children

The game is not intended for children under 13 and we do not knowingly collect data from children under 13. If you believe an account belongs to a child under 13, contact us and we will delete it.

7. Changes

When this policy changes we will update this page and its "Last updated" date. For significant changes we will also let you know in the game.

8. Contact

For any privacy question, email us at nookblom.studio@gmail.com.