privacy

Last updated: May 27, 2026

how we think about your data

humhumhum is built on a simple idea: faces are blurred, screens stay hidden, and only what you choose to share is seen. The same goes for your data — we collect only what the space needs to work, we don't sell it, and we don't hand it to advertisers. Here's exactly what we keep, why, and how to control it.

who runs humhumhum

humhumhum is made and run by Eunggyu — operating as Dear RoRo (Einzelunternehmen, sole proprietorship), based in Munich, Germany. Privacy questions? Write to hello.threesby@gmail.com. We read every message.

what we collect

When you join (it's invite-only): → your email — to sign you in → a display name — shown in the space → your country, and optionally your time zone → the profession(s) and tools you pick → a cover illustration and a desk photo you upload As you use it: → your seat number, and when you clock in and out → whether a session is on mobile or desktop → your mood and one-line notes → your private board — sticky notes, to-dos, drawings, timers → your timeline / schedule blocks → your "where i work" space — its title, description, photos, gear → chat messages you send → if you save a seat or invite someone, the email you enter for them If you tip the maker: → the payment is handled by Stripe; we never see or store your card details. A note you choose to leave is kept. In aggregate: → a simple count of home-page views (device type, and whether the viewer was signed in) — with no IP address and no identifier. What we don't collect: → passwords — we sign you in with an email link or code → your real name, unless you choose to use it → your phone number or address → anything from your microphone or camera → your screen, or your activity outside humhumhum → advertising or cross-site tracking data

who can see what

The office is open. Anyone — even signed-out visitors on the home page — can see your display name, country flag, seat number, your mood, notes and tools while you're present, your cover illustration, and whether you're working right now. Your desk photo shows on your desk page; your chat messages are visible to other members. Cover and desk images are served from public links, so please treat them as public — don't upload anything you wouldn't want seen. Only you can see your email, your sticky notes, to-dos, drawings and timers, your schedule blocks, and your own session history and calendar. As the person running the service, Eunggyu can technically reach stored data — but only looks when it's needed: fixing a bug, answering you, or handling an abuse report. We never sell or share your data for marketing.

services we use

→ Supabase — sign-in, database, and image storage → Vercel — hosts and serves the site → Stripe — only if you choose to tip We don't use Google Analytics or other tracking tools, no ad networks, no tracking pixels, and no third-party tracking cookies.

cookies & local storage

We use only the essential cookies that keep you signed in. Your browser also remembers your view preferences locally, on your device — that never leaves your browser. No tracking cookies, no ad cookies.

your rights

You can ask to see the data we hold about you, correct it, delete it, export it, or object to how it's processed — and you can complain to your local data-protection authority. In the EU these rights are under GDPR; in Korea, under PIPA. To exercise any of them, write to hello.threesby@gmail.com.

deleting your data

Open the account menu (your name, top right) and choose "delete account." This permanently removes your profile, sessions, notes, board, spaces, and everything tied to your account right away, and can't be undone. Your seat opens up for someone else. Backup copies are purged within about 90 days. You can also email us and we'll handle it.

how long we keep it

While your account is active, we keep your data as long as you want it. After you delete your account, it's removed from the live service immediately and gone from backups within about 90 days.

where your data lives

Your account, content, and uploaded images are stored with Supabase; the site is served by Vercel. If you need to know the exact hosting region for residency reasons, write to us and we'll tell you.

children

humhumhum isn't for anyone under 16 (or your local age of digital consent). If we learn that a younger person has signed up, we'll remove the account.

if this changes

We may update this policy. If we make a meaningful change, we'll let you know by email or with a notice in the space.