Privacy Policy

Momiji Go v1.0.1 · Last updated 6 November 2026

Who we are

Momiji Go is made and published by BRUNA GOODS LLC ("we", "us", "our"). This policy explains what happens to information when you play the game, and it applies to the game and to these pages.

Questions, requests or complaints about privacy: support@bruna.world.

What we collect

On the website, in a browser, we collect nothing about you. We do not ask for your name, e-mail address, age, location or payment details, and the game has no way to send any of them to us.

In the Meta Quest app from the Meta Horizon Store, the game collects and processes the following, through Meta's platform:

• Your user ID. Meta gives the app an ID for the Meta account you are signed in with. It belongs to Momiji Go alone (another app is given a different one for the same account) and carries no name, picture or contact details. Used to recognise you from one session or headset to the next: to give you the add-ons you have bought and, if the game gains leaderboards or achievements, to record your scores and what you unlock with Meta's own leaderboard and achievement services. Kept on your headset, in the app's own storage, and by Meta; never on a server of ours.
• Your purchases. If you buy an add-on, the game receives from Meta which add-ons your account owns and the details Meta returns with each purchase: the item, a purchase token and when it was bought. Used only to unlock what you bought and to confirm the purchase with Meta. Kept on your headset, in the app's own storage; Meta keeps the record of the purchase and of the payment. We never see your payment details.
• Reports. If you report a player, or a player reports you, with Report Abuse, Meta passes the report to us (see Reporting a player). Used only to look into it and act on it. Kept by us for as long as that takes, and no longer.
• Head and hand positions. In a two-player game, the game reads where your headset and hands are and sends that, several times a second, directly to your opponent, so that they can see you sitting opposite (see Two-player games). Used only for that. It is not sent to us and not stored.

We do not use any of this for advertising, we do not sell it, and we share it with no one but Meta, which provides the features above. Momiji Go does not:

• create an account or a player profile of any kind (the Meta Quest app uses the Meta account you already have);
• send your games, or anything you do at the board, to us or to anyone else — a two-player game aside, which is described below. Three things are written to your browser, all of them under What stays on your device: the offline copy of the game's own files, one on/off choice, and your last five games;
• set cookies;
• show advertising, or sell or share anything about you with anyone;
• use your microphone, camera or passthrough images.

Your settings — board size, opponent strength, language, music — live in memory for as long as the tab is open, and are gone when you close it. The one exception is described below.

What stays on your device

An offline copy of the game. The game's code, models, textures and fonts are ordinary web files. On your first visit, a small script that runs in your browser (a service worker) saves a copy of them — about 25 MB — in your browser's own storage for this site. After that, reloading the page loads the game from that copy instead of downloading it again, and the game can be played against Lord Tsukikage with no internet connection at all. The copy contains only the game's own files, the same for every visitor — and, in a headset, the models of your controllers and hands once they have been downloaded (see Controller and hand models), so that they are drawn offline too. Nothing about you or your games is added to it. When we publish an update, your browser downloads only the files that changed the next time you visit while online, and replaces the old copy with the new one.

One choice. If you tick Don't show this again on the "First time playing Go?" question, your browser remembers that single on/off choice (in its local storage, under the name momiji:never-ask-first-time) so that the question is not asked again. It is never sent anywhere.

Your board height. If you raise or lower the board in a headset, your browser remembers how far, once for VR and once for AR (in its local storage, under the name momiji:board-height), so that the board is where you left it next time. It is never sent anywhere.

Your last five games. When a game against Lord Tsukikage ends, your browser keeps it so that you can play it back under Past games: the board size, komi, opponent strength and the colour you played, every move in order, the final score, and the time the game finished. Only the five most recent are kept, each new one replacing the oldest. They are held in its local storage, under the name momiji:games, and are never sent anywhere — the suggestions shown while you play one back are worked out in your browser too. Lessons and two-player games are not kept.

The store notice. At most once a day, a notice over the game's page may say that Momiji Go is in the Meta Horizon Store. Your browser remembers when it was last shown (in its local storage, under the name momiji:store-notice), so that it waits a day before showing it again. It is never sent anywhere.

All five stay in your browser and belong to it, not to us: we cannot read them, and clearing this site's data in your browser's settings removes them. The game then simply downloads itself again on your next visit.

In a headset, hand and controller tracking is performed by the headset and the browser. The game receives positions and orientations through the standard WebXR interface and uses them to move your hands in the scene; nothing about your surroundings, your body or your play space leaves the device — except the head and hand positions described below, in a two-player game. In AR, the room you see around the board is shown to you by the headset itself; the game is given no picture of it.

Controller and hand models

In a headset, the game draws your controllers and hands with the standard 3D models of the open-source WebXR Input Profiles project. They are not among the game's own files, because which ones you need is known only when a controller or a hand appears. The first time one does, your browser downloads its model from jsDelivr (cdn.jsdelivr.net), a free public network for open-source files. Like any web server, jsDelivr sees the request — your IP address, your browser and its version, this site's address, and which model was asked for, such as the controllers of a Quest 3 — under its own privacy policy. Nothing about you, your games or your surroundings is sent with it.

Your browser then keeps that model with the offline copy described above, together with the controller's other half and the models of both hands, and does not ask for them again. On a phone or a computer, no model is downloaded.

Two-player games

A two-player game is peer-to-peer: there is no game server of ours in the middle, and there is no chat and no account. You can play a friend by sharing a room code, or wait in one of two public waiting rooms to be paired with a stranger. It works like this, and these are the only points at which anything about you goes anywhere.

Finding each other

One player hosts a room and reads out a four-digit code; the other types it in. The code is random, temporary, and tied to nothing about either of you. To introduce the two browsers, the game uses Trystero, which carries the WebRTC handshake over public relays, and public STUN servers operated by Google (stun.l.google.com) and Twilio (global.stun.twilio.com) to discover the public network address your connection appears from. Those operators see connection metadata — including your IP address — under their own privacy policies. They do not see the game.

Waiting rooms

Choosing to find a player puts your browser in the waiting room for the board size you picked, which is found through the same relays. While you wait, your browser connects directly to the browser of everyone else waiting in that room, and tells each of them when you started waiting and whether you are free to be paired, so that between them they can agree who plays whom, first come first served. Those browsers therefore learn your IP address, as an opponent's does (see below), though the game shows the other players nothing about you. You leave the waiting room as soon as you are paired, stop looking, or choose to play Lord Tsukikage instead.

Playing

Once the two browsers have found each other, everything travels directly between them over an encrypted WebRTC data channel: the moves, the board size, the result of the count, and — several times a second — the position and rotation of your head and hands, so the other player can see you sitting opposite. Nothing else is sent, and none of it reaches us.

What the other player can see

A direct connection means your opponent's device and yours exchange IP addresses. That is how peer-to-peer connections work everywhere, and it is worth knowing before you share a room code with a stranger, or wait in a waiting room, where a stranger is who you will be paired with. Share codes with people you are happy to play with; if you would rather not, play Lord Tsukikage instead — a solo game never runs the networking code and never contacts a relay. (That code is part of the offline copy described above, like every other file of the game, but it does nothing until you host or join a room, or wait in a waiting room.)

Because a two-player game needs those relays, it is not available while your device is offline; the game says so rather than trying.

Reporting a player

In the Meta Quest app, you can report another player's conduct with Report Abuse in your headset's menu. Meta collects the report and passes it to us, encrypted: the reason you chose, anything you wrote, and the details Meta attaches to identify the player you reported. We use a report only to look into it and act on it, keep it no longer than that takes, and share it with no one.

The Meta Quest app

Momiji Go is also published as an app in the Meta Horizon Store. The app is these same pages, opened by your headset straight into VR, and everything above applies to it. Two things are different, and only in the app; in a browser, neither happens.

Your Meta account ID. The app can ask Meta for an ID for the Meta account you are signed in with. It is a number that belongs to Momiji Go alone — another app is given a different one for the same account — and it carries no name, picture or contact details. The game uses it only to recognise you from one session or headset to the next: so that add-ons you buy are yours wherever you play, and, if the game gains leaderboards or achievements, so that Meta's own leaderboard and achievement services can record your scores and what you have unlocked. The ID is not shown to other players, not sent to a server of ours, not sold, and not shared with anyone.

Add-ons. Momiji Go is free to play. The app may offer optional add-ons, such as new gardens and robes. If you buy one, you buy it from Meta through the Meta Horizon Store: Meta takes the payment and keeps the record of the purchase, under Meta's own terms and privacy policy, and tells the game which add-ons your account owns so that it can unlock them. We never see your payment details.

Hosting

Wherever these pages are served from, the hosting provider may keep standard web server logs — IP address, time, the file requested, browser version — for security and operational reasons. Those logs are created by the host, are not used by us to identify anyone, and are subject to the host's own retention policy.

Counting visits

We measure how many people come to this site, so that we know whether anyone is playing. One tool does that, and it cannot see your games: no move, no board position, no room code and no opponent is sent to it.

Vercel Web Analytics

Run by our host as part of serving the site. It sets no cookies and writes nothing to your browser. It records the page, the referring site if there was one, and the country, operating system, browser and device type your request arrived with. To tell one visit from another without identifying anyone, Vercel derives a hash from the request — including its IP address — together with a salt that is discarded and replaced every day. The IP address itself is not stored, and once the salt rotates the same visitor is no longer recognisable as the same visitor.

Because it stores nothing on your device, there is nothing for you to clear; a tracker blocker will stop it, and the game plays exactly the same either way — nothing about it depends on being measured.

We look at totals: how many views a page had, roughly where in the world from, on what sort of device. We do not try to identify individual players, and we do not combine this with anything else.

Links to the Meta Horizon Store

The banner and the notice on the game's page that point to Momiji Go in the Meta Horizon Store go there through Meta's short links (vr.meta.me). Meta counts the clicks on each, and the installs and launches that follow, and shows us only those totals. Nothing is sent to Meta unless you follow one of the links; once you do, you are on Meta's site, under Meta's own terms and privacy policy.

Children

Momiji Go is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the Meta Quest app or sent us personal information, write to support@bruna.world and we will delete whatever we hold. Virtual reality headsets carry their own manufacturer age requirements; please follow them.

Deleting your data

Everyone can ask us to delete their data, wherever they live, and it costs nothing. Write to support@bruna.world with the subject Delete my data. Tell us whether you play in the Meta Quest app or in a browser, and anything that helps us find what we hold — for example the date of a report you made. We never need your password. We will delete what we hold and confirm it to you within 30 days.

What a deletion covers:

• What we hold — reports, and any correspondence with you. We delete it.
• What is on your headset or in your browser — the app's copy of your user ID and purchases, your settings and your past games. It never reaches us, so you can delete it yourself at any time, at once: uninstall the app or clear its data, or clear this site's data in your browser. We will tell you how if you ask.
• What Meta holds — your Meta account, the record of your purchases and payments, and any scores or achievements kept by Meta's services. Meta controls that data, so its deletion goes through Meta's own privacy settings and support; if you ask us, we will point you to the right place and pass on your request.

The only thing we would not delete on request is a record the law requires us to keep — such as the record of a request from a public authority described below — and then we keep only that, for no longer than the law requires, and tell you what we kept and why.

Your other rights

You can also ask us to tell you what data we hold about you, to correct it, to give you a copy, or to stop using it. These rights are open to everyone, wherever you live, whether or not a law such as the GDPR, the UK GDPR or the CCPA/CPRA applies to you. Write to support@bruna.world and we will answer within 30 days. We do not sell or share personal information.

If you correspond with us, we will hold that correspondence for as long as it takes to deal with it, and no longer than we need to.

Requests from public authorities

We hold almost nothing about anyone, so there is little a request could reach. If a public authority asks us for personal data about a player, we:

• check that the request is valid and lawful, and that it comes from an authority entitled to make it;
• challenge a request we believe is unlawful, overbroad or unclear, by the legal means available to us;
• disclose only the minimum the law requires, and nothing where we hold nothing;
• keep a record of each request, our response, the legal reasoning behind it and the people involved.

Where the law allows, we tell the person concerned before we disclose anything.

Changes to this policy

If the game changes in a way that changes this policy — a leaderboard, an account, a purchase — we will update this page and the date at the top of it before that change ships. Material changes will be noted in the game's release notes.

Contact

BRUNA GOODS LLC
support@bruna.world