Privacy policy / 隐私政策

Effective date: 9 October 2026. Operator: LIANG RAO. Contact: liang.rao@gmail.com. This policy describes Bloomroom at flower.fde.fan and its hosted MCP plugin.

Data we process and why

Anonymous MCP design uses the structured arrangement, title, chosen flower materials and compiled work. We store the design, compiled arrangement, preview, creation/update/expiry times, a random public handle and a hash of the creator secret to provide viewing and authorized editing. The server does not receive your entire ChatGPT conversation through these tools; it receives the tool arguments your agent sends. Do not put sensitive personal information in a work title or design description.

Requests include network information such as an IP address and request headers. MCP rate limits use a hash derived from the request identifier and action, short counters and reset times. These controls protect availability and prevent abuse. Hosting and application diagnostics may process request metadata and errors for operating and troubleshooting the service.

Accounts and optional website features

If you register on Bloomroom, we store your username, salted password hash and session records. We use a login cookie with a maximum age of 30 days. Saved works and drafts are associated with your account. Browser storage also keeps local studio state and preferences. Optional website postcards can include uploaded images, greeting text and voice recordings; only submit material you have permission to share. Website AI features may transmit prompts and relevant artwork data or images to the configured AI provider. The MCP plugin itself compiles arrangements without calling those AI generation endpoints.

Who receives data

Vercel hosts the application; Supabase provides database and file storage. These infrastructure providers process data needed to operate Bloomroom. Your agent platform, such as ChatGPT, processes your conversation and tool results under its own policies. If you separately use website AI features, the configured AI service also processes the inputs needed for that feature.

Sharing and retention

Anyone with a valid public draft handle or work link can view that work. Creator links contain authority to edit or claim a draft and must stay private. Full serialized links contain the artwork data; expiring a temporary draft does not remove copies of those links or copies held by recipients or agent platforms. Public gallery works and postcards can be accessible beyond your conversation according to their visibility settings.

Anonymous MCP drafts cease to be accessible through their temporary handles after 24 hours from creation or latest edit. Expired database rows are cleaned up during subsequent draft creation, rather than necessarily at the exact expiry time. Saving a work to an account creates a separately retained saved work. Account works and optional uploads remain while needed to provide the service, until removed or addressed through a verified support request. Infrastructure logs and backups may follow provider retention schedules; expiration or deletion does not imply immediate erasure from every backup.

Your choices

You may use anonymous design without creating an account, avoid optional uploads and AI features, and use the website controls to delete saved drafts or adjust available visibility settings. Contact the operator for access, correction or deletion requests, and complaints about data handling. We may need to verify that you control the relevant account or work before acting. Clear browser storage to remove local copies. Contact the agent platform separately about copies in your conversations.

Changes

Updates will appear on this page with a revised effective date. Use the support contact for questions about this policy.