Privacy
Version 2026-10-23. When a grown-up creates a family account they confirm they are the child’s parent or legal guardian and accept this document; Mobloom records which version they accepted.
Who we are
Mobloom is operated by JM Orbit Labs Enterprise, a business registered in Malaysia (registration number 003902994-D), which is responsible for the data described on this page. You can reach us through the Contact page.
The short version
Mobloom is child-facing, so we collect as little as possible, and what a child makes belongs to the family. Without a family account, Mobloom does not create a cloud shelf or family profile for you — making stays on your device. Like most websites, our servers may briefly see technical data needed to load the page (for example connection details). We don’t use that to build a profile of you or your child.
Kids don’t need their own Mobloom account. A maker is just a nickname inside your family account.
What we store, and why
Without an account: no cloud shelf and no family profile — we don’t create one for you. Creatures, settings and drawings save in your browser’s storage on your device only. Loading the site does mean our servers see the ordinary technical connection details any website sees; that isn’t a profile of you or your child.
With a family account (created by a grown-up):
- Adult account: email address and a password (stored by our authentication provider, Supabase, in hashed form) — so you can log in and recover access.
- Maker: a nickname chosen by the family — the label that says whose creature shelf it is. It doesn’t have to be a real name. A maker is not an account and cannot log in. We deliberately ask for nothing else about the child: no email, no password, no phone number, no birthday, no real name, no photo, no location. (The little emoji shown next to a maker is picked automatically on your device and never stored.)
- Creatures: the project files themselves, with their edit history — so work survives lost devices and mistakes can be undone.
- Billing (only if a grown-up starts the free trial or subscribes): payments are processed by Stripe. Mobloom never sees or stores your card number. We store your subscription status, when your trial and billing period end, whether a payment method is on the subscription (a yes/no from Stripe, never the card), when you accepted the subscription terms, and a Stripe customer reference, so we can open the right parts of Mobloom for your family. Stripe shares limited billing records with us (payment status, the last four digits of the card, invoice records) and holds the rest under its own privacy policy.
- One free trial per card (once a card is added): to keep the free trial honest we keep a salted, one-way hash of the card fingerprint Stripe already holds, with the date. It is not the card number, it cannot be turned back into one, and it is not linked to your account or your name. Beside it we keep a one-way code for the trial it first started, so your own card is never mistaken for someone else’s. Together they can only answer “has a card like this started a different Mobloom trial before?”.
- Partner codes (only if you came through a partner’s link or typed a partner code): a partner’s link (mobloom.app/?ref=CODE) leaves a small cookie in your browser holding just that code, for 60 days. If a grown-up then makes a family account, or types a partner code when starting the free trial, we note which partner it was beside your account, which subscription it is, and when it first paid, and we keep a record of each paid invoice we owe that partner a share of (the invoice reference and the amount). The partner never learns who you are: we pay them from totals.
The Creator Challenge (only if you enter or vote)
An entry stores the mob itself (the creature file), its name, a nickname the grown-up types for the maker (not a real name), an optional short description and picture of the mob, the child’s age category and age on the opening day (never a date of birth), the grown-up’s country of residence (to apply the right rules), the grown-up’s agreement and consent to the rules, and the dates. Nothing else about the child. The gallery and the results show the mob, its name, the nickname and the age category, and only where the grown-up allowed it; a family can withdraw that permission at any time.
A vote stores the voting account and the entry, plus a salted one-way code made from the connection’s internet address so that one person voting many times can be seen; it cannot be turned back into the address. Judges’ scores are stored with the judge’s identity and time. Certificates store what is printed on them. Rewards store what was given, when and by what means. Entries, votes and address codes are deleted within 90 days of the results being published, except what a prize or a certificate needs; everything is deleted with the account, or sooner on request. Competition pages carry no advertising trackers; the only counting is a daily total per event (entries, approvals, votes, rewards), with no identities.
Mobloom Universe (only if your family chooses to show a creature)
The Mobloom Universe is a public showcase of creatures children made. A child can ask to show one; only a grown-up on the family account can offer it, and a person at Mobloom checks every creature before it appears. When a grown-up offers a creature we keep a frozen copy of it, its name, the words the child wrote about it, a small picture, the place it lives, and the grown-up’s two choices: whether the maker’s nickname is shown (otherwise it says “a young maker”) and whether other families may download the Minecraft file. Both are off unless the grown-up turns them on, and a grown-up can take a creature back at any time, after which it leaves the public page and cannot be downloaded.
The public sees only the creature, its name, the words, the place it lives, the nickname if allowed, and whether downloads are allowed. Never an account, an email address, a real name, or any count. There are no comments, messages, likes, ratings or rankings. Anyone can report a creature; a report keeps nothing about the person who sent it.
When a family downloads a creature from the Universe we record the creature, the downloading family’s account and the day — once per creature, family and day — so Mobloom can see how the Universe is used. Those numbers are visible only to Mobloom’s own administrators, never on any public page or to any child, and are deleted after 400 days.
Writing to us
If you write to us (see Contact) we keep the message for as long as it takes to answer it. We do not ask for your name, your child’s name, their age, birthday, school, gender or photograph, how many children you have, or anything you might type into a “tell us about yourself” box. There is no such box. Nothing about your child, at all, ever.
What we don’t do
- No ads in Mobloom. We don’t sell your family’s personal information or share it with data brokers. We do use service providers (for example hosting and Stripe) to run the product — only as needed, and we’ll list them here as the draft matures.
- No public child profiles, chat, comments or follower counts.
- No tracking pixels from ad networks.
- Product analytics are off right now. If we turn them on, we will update this Privacy Policy (draft) the same day and say what we measure. They would be anonymous product events (like “a creature was exported”) with no creature content, no names and no personal data.
Deleting
Deleting a creature from the cloud moves it to a bin in the grown-ups area, where a grown-up can bring it back. We don’t empty that bin on a timer — clearing it out for good is a manual step, so tell us through contact if you want something gone now.
A grown-up can delete the whole family account from the grown-ups area, which removes the account, its child profiles, cloud creatures and billing relationship — or ask us to do it through contact instead, and we’ll do it by hand. During early private testing, requests sent to us are handled by a person, not a scheduled job.
Creatures saved on your devices and exported files are not touched by any of that, and remain yours. We recommend exporting anything precious first — the export file can always rebuild the creature.
Questions
See contact.