mumu.land

Privacy policy

Effective 10 November 2026

This policy covers the website mumu.land and the mumu.land Home Bridge (“the bridge”), a private connector run by the owner of mumu.land for their own household.

Data the bridge accesses

When the owner authorizes it with their Google account, the bridge uses the Google Smart Device Management API and Cloud Pub/Sub to access, for the owner's own Nest devices only:

It does not access email, contacts, location history, camera video or any other Google data.

How the data is used

The data is used only to show the thermostats in Apple Home and to apply changes the household makes there. It is not used for advertising, profiling or analytics, it is not sold, and it is not shared with anyone else.

Where the data is stored

The bridge runs on a server in the owner's home. The OAuth tokens that let it talk to Google, and the most recent device state, are stored on that server and nowhere else. Apple Home receives the thermostat state over the local network, as it does for any HomeKit accessory.

Retention and removal

Device state is overwritten as new readings arrive. Apart from short-lived diagnostic logs on the same server, no history is kept. Access can be withdrawn at any time by removing the app at myaccount.google.com/permissions. Withdrawing access stops the bridge, and the owner then deletes its stored tokens.

Google API Services User Data Policy

The bridge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

This website

mumu.land is a static site hosted on GitHub Pages. It sets no cookies and runs no analytics or trackers. GitHub may log visitors' IP addresses for security, as described in the GitHub Privacy Statement.

Changes and contact

If this policy changes, the new version will be posted here with a new effective date. Questions: privacy@mumu.land.