Privacy Policy

01Who looks after your data

Habblaud World is run by Marcio Motta, an individual. This person decides how the data is used. In legal terms, they are the controller.

For anything about privacy, write to [email protected]. We reply within 15 days.

02What this policy covers

This policy applies to Habblaud World: your account, your character, your building and the world server.

Habblaud, the office that runs on your computer, stays the same if you don’t create an account: 100% local, with no new connection and no new data stored. If you use it at work, you can even hide the World invitation with HABBLAUD_WORLD=0 in .env.

03How data leaves your computer

• Your browser never talks to the world server. Habblaud on your computer does, over an encrypted connection (TLS). The browser still talks only to localhost.
• A single file decides what leaves. It’s open, in Habblaud’s public repository, and it has tests that fail if any field outside the list or any text from your office shows up.
• The server rejects everything else. It checks every field and drops any packet with an unknown field or free text.
• You can see what was sent. In Settings › Habblaud World › See what was sent, Habblaud shows the exact JSON of the last upload, with its time and size.

“With the data that leaves, no one can tell who you are or what you work on.”

04What leaves your computer

It’s a closed list. Only what is listed here leaves.

Nothing else. The packet for an office with 3 projects and 5 agents is about 2 KB.

05What never leaves

• The path and name of your projects, and the names you gave your rooms.
• Session titles, the branch, the permission mode and the AI model (Opus, Sonnet, Haiku…).
• What the agents do: activity, tasks, commands, shells, permission requests, questions, messages and any text from the conversation.
• The cost in money, lines of code and the number of tool calls.
• Your Claude and Codex accounts: email, organization, plan and 5 h and weekly usage.
• The name you gave a character, which may be your real name. In the world, it gets a different name, drawn at random.
• The character’s “seed”. Its look in the world comes from a random code, not from your office.
• Your computer’s name, your system user and your time zone. The device shows up only as “Device 1”, “2” or “3”.
• The “My day” stats, the timelapse timeline and the session history.
• Demo mode agents.
• Your IP. Habblaud doesn’t send it. The server sees the connection’s IP, like any website, and keeps only the country (see What the server keeps).

06What other players see, live

“Anyone visiting the world sees, live, how many projects and agents you are running and what each character is doing (working, waiting, idle). Nobody sees which projects they are, what the agents are doing, or who you are: only the nickname and avatar you chose.”

A lit building doesn’t mean a person is awake. Agents work on their own, even in the middle of the night, and a building can stay lit 24 h. That’s why the World never says you are “online” or “offline”. It says the building is “lit” or “dark”.

What is public

• You: player name, avatar, personality traits, intro phrase, country (unless you hide it), likes received and which building is yours.
• Your building, outside: lit or dark, the number of floors (up to “24+”), how many agents are working, waiting and idle, the theme, the token band (if on), the likes and the month it joined the world.
• Your building, inside: one room per floor, with a made-up name (“Project Ipê”, “Project Jade”…), and each character with its name, role, tool and status. No terminal, no messages, no details.

How “live” never becomes “identifiable”

• No project can be identified. The codes and made-up names of the floors change every 24 h (give or take up to 6 h), and the order of the rooms is shuffled. Someone visiting on two days in a row can’t tell whether it’s the same project.
• No office times leave. A visit shows the status, never “for how long”.
• No building history is kept. There’s no building timeline and no “last seen”.
• No list, no feed. No one can list buildings or players. Each player only receives what is around where they walk. The minimap only shows how many buildings are lit on each block.
• You control what you show: hide your country; discreet mode (only lit or dark and the number of floors, no counters or status); closed to visitors (people can see it from outside, but no one gets in); block someone (you disappear for each other, buildings included); and pause.

One limit, stated plainly: someone who watches the same building for a long time may notice patterns, like more agents on weekdays. Since agents run on their own, not even that tells when you are at your computer. If you don’t want even that, use discreet mode or pause.

07Tokens: in bands, never the cost

Token usage shows up in bands (e.g. ≈ 12 M per week), never the cost.

• Habblaud sends the building’s total for the day and the week, rounded. The server turns it into a band and publishes only the band. Only you see the exact number, in your Habblaud.
• Money never leaves: not the cost, not a conversion into dollars or any other currency.
• What shows up always belongs to the building, never to the person: “this building used ≈ 12 M this week”.
• Show token usage is on by default and has a switch in Settings. When it’s off, tokens don’t leave and the facade stays neutral.
• The leaderboard is separate, and only people who want to join are in it (see the Terms of Use).

08What the server keeps

About your account

• Email. It’s your login. It never shows up for other players.
• Password: only a digest of it (Argon2id hash). Never the password itself.
• Language, the version of the terms you accepted and the date you accepted them.
• Account status: on the waitlist, approved, suspended or banned.
• Account dates: creation, email confirmation, last access, name changes and a security log (logins, logouts, pauses, deletions and moderation decisions). These dates are not published.
• Devices: up to 3, labeled “Device N”, with the dates they were used and a digest (hash) of the token.
• Codes sent by email: only a digest, valid for 10 minutes.

About your character

• Player name, look, traits and intro phrase.
• Country: only the country code, taken from the IP. It’s replaced on every connection, with no history.
• Your visibility choices: hidden country, discreet mode, closed to visitors, tokens visible, leaderboard and compaction.

About social life

• Likes given and received, blocks and reports (made and received, with the reason and the decision).
• Your position in the city and greetings go through the server, but they stay only in memory while you play.

About your building: only the current counters

• The lot in the city, the state (lit, dark, paused…), the theme, the number of floors, how many agents are in each status, the token bands for the day and the week (and the running sum for the current week, reset every Monday), the likes, the month it joined the world and the day of the last signal.
• Floors and characters stay only in the server’s memory, as they arrive. They aren’t written to disk.

About data checks

The World exists because the buildings are real. That’s why the server checks whether each packet is plausible. It keeps an anomaly score per account, which goes down over time. If a packet looks fake, it keeps a copy of that packet for a person to review. The packet has no personal data, and this is the only exception to the rule of keeping only the current counters.

What the server never keeps

• Your IP. To limit attempts (at login and sign-up, for example), the server uses a digest of the IP mixed with a value that changes every day. That digest is deleted within 24 h.
• Nothing from your office beyond the building’s current counters.
• No building history: not when a floor appeared, not when a status changed, not when the building lit up.
• No passwords and no tokens, only digests (hashes).

09What we use it for

• Making the World work: your account, your character, your building and the city.
• Sending account emails: confirmation code, password change, the waitlist’s “it’s your turn”, a warning before removing an idle building, moderation notices and deletion confirmation.
• Protecting the service: limits against abuse, data checks and moderation.
• Measuring server capacity, only with aggregated numbers (how many active accounts, for example), to let people in from the waitlist bit by bit.

We don’t sell or rent data, and we don’t use data for advertising.

10Legal basis

We process your data on two legal bases from the LGPD (Brazil’s General Data Protection Law, Law 13,709/2018) and the GDPR (the European Union’s data protection regulation):

• Consent: the acceptance box at sign-up (LGPD, Art. 7(I); GDPR, Art. 6(1)(a)). You can withdraw it whenever you want: pause, leave the world or delete your account.
• Providing the service you asked for: without an email, a password and a building, there’s no account and no world (LGPD, Art. 7(V); GDPR, Art. 6(1)(b)).

11Who we share it with

• Cloudflare. It sits in front of the server, as an intermediary (proxy). It sees the connection’s IP to set up the encrypted connection (TLS), tell which country it comes from and block abuse. We don’t keep that IP.
• Amazon Web Services (AWS). Amazon SES sends account emails: it receives your address and the text of the message, in the United States. Amazon S3 stores the daily backups of the database.
• Pwned Passwords, from the Have I Been Pwned service. When you create or change your password, the server checks whether it has already shown up in a leak. To do that, it sends only the first 5 characters of a digest (SHA-1) of the password. The password and your email don’t leave.
• The Habblaud World team: the controller and anyone they register to administer or moderate, through a separate panel, with a password and a second-factor code. Moderators see your email masked. Everything the team does is logged.
• Other players see only what is in What other players see.
• Authorities, only when the law requires it.

Cloudflare and AWS process data outside Brazil, including in the United States. We send each of them only what their task needs.

12Waitlist

• After you confirm your email, your account joins a waitlist. We let people in bit by bit, in batches, and email you when it’s your turn. There’s no position and no estimate.
• While you wait, we keep your email and your character, if you create one. Nothing leaves your computer: Habblaud doesn’t connect to the world.
• If the account doesn’t join the world within 30 days of the “it’s your turn” email, the spot goes back to the queue. The account stays, at the end of the list.
• You can delete your account at any time, including while on the waitlist.

13How long we keep it

14Your rights and how to use them

Under the LGPD and the GDPR, you can find out what data we have, get a copy, correct it, delete it, withdraw your consent and find out who we share it with. Almost all of it is a button in Settings › Habblaud World.

You can also file a complaint with the ANPD (Brazil’s National Data Protection Authority) or with the data protection authority in your country.

15Minimum age

Habblaud World is only for people aged 18 or older. If you are younger, don’t create an account.

16Country

• Your country comes from the connection’s IP, as reported by Cloudflare. We keep only the country code (BR, PT, FR…), replaced on every connection.
• You can’t pick a different country. With a VPN, the VPN’s country shows up.
• You can hide it. A neutral flag shows up instead.

17Security

• Encrypted connection (TLS) between your Habblaud and the server.
• Passwords hashed with Argon2id. Tokens and codes stored only as digests.
• The device token stays on your computer, in a file only your user can read (~/.habblaud/world.json). Never in the browser, never in a URL, never in a log.
• Logs without personal data: an account number instead of the email and the country instead of the IP.
• If there is a security incident that may affect you, we will tell you and the authorities, as the law requires.

18Cookies

The game and your account don’t use cookies. Your browser doesn’t even talk to the world server: it only talks to Habblaud on your computer.

The server’s admin panel uses a session cookie, but it’s only for the team. Players have no access to it.

These terms and privacy pages store only the language and theme you choose in your browser, without cookies.

19Changes to this policy

When this policy changes in a meaningful way, we publish a new version on this page and Habblaud asks you to accept it again at your next login. The version and the date are in the footer.

20Contact

Marcio Motta, controller of Habblaud World’s data.
Email: [email protected]

Please also read the Terms of Use.