privacy
last updated 13 July 2026
The short version. Play the toys and we collect nothing about you. Give us your email and we use it for one thing: a note when a new toy hatches. You can leave any time, one tap, and we delete it. No selling, no ad trackers, no cookies for spying.
Who runs muplu
muplu is a small internet playground made by Nicola Harvey, based on Australia's east coast. Questions, requests, or "please delete my data" all go to hello@muplu.com.
What we collect, and why
- Your email address, only if you type it into the "new toys" box. We store it so we can email you when something new launches. Alongside it we keep the date you joined and your browser's user-agent string, which helps us spot spam signups.
- Nothing to play. The toys and games run in your browser. Games like FLINCH save your best scores and progress in your own browser's local storage, on your device. That never leaves your device and we cannot see it.
- Hushpaper. When you use "change the story," the story title and lines and your written request are sent to a third-party AI service (NVIDIA's hosted models) to rewrite the words, then sent back. We do not attach your identity to that, and we do not store it.
- Together games. LETTERBOX, ROCKPOOL and POUNCE keep a small game room on our server so two people can play from two places. A room holds the first names the players typed in, the moves of that game, and a running tally. No email, no account, no login. A room deletes itself after about two months of quiet, and you can ask us to clear one sooner. The email invite is a note you send from your own email app; muplu never sends or sees it.
Cookies and tracking
No advertising cookies and no cross-site trackers. If we measure traffic, we use a privacy-first, cookieless counter (Cloudflare Web Analytics) that records page views without building a profile of you or following you around the web.
Who we share it with
We do not sell or rent your data, ever. A few trusted services help muplu run:
- Cloudflare hosts the site and stores the mailing list.
- Resend sends the emails (the confirmation and the "new toy" notes).
- NVIDIA hosts the AI model behind Hushpaper's "change the story."
Each only handles what it needs to do its job.
Your choices
- Leave any time. Every email has a one-tap unsubscribe, and it takes effect straight away.
- Get it deleted. Email hello@muplu.com and we will remove your address and anything tied to it.
- Double opt-in. When you join, we email you once to confirm it was really you. If you never confirm, you are never added.
Children
Hushpaper is made for grown-ups to enjoy with very young children, but the muplu mailing list is for adults. We do not knowingly collect personal information from children. POUNCE is built to be played with someone a child already knows: it asks for a first name only, it has no chat (players can send six emoji and nothing else), and its invites travel person to person by the players' own email.
Handling in line with Australian privacy law
We aim to handle personal information in line with the Australian Privacy Principles. If you are in a region with its own rules (for example the UK or EU), the same rights apply: see your data, correct it, or have it deleted. Just email us.
Changes
If this policy changes in a way that matters, we will update the date at the top and, if it affects the mailing list, say so in an email.
back to the toys · terms · the story