Hushroom glowing mushroom logo Hushroom — Cozy 3D Virtual Study Hall & Social Sim

← Back to all Devlog articles

Privacy-First Multiplayer: Anonymous Sessions, Turnstile Verification, and Ephemeral Chat

Multiplayer & Privacy · October 5, 2026 · 5 min read

How we keep Hushroom safe from bots and spam while requiring zero email addresses, passwords, or personal accounts.

Zero-Account Friction, Real-Time Presence

Every signup form is a barrier between a tired student and their study session. Hushroom uses invisible anonymous sessions paired with local storage persistence (`st.profile` and `st.timer`) so your character, study subjects, and focus history are remembered automatically on your device without ever asking for your email address.

Layered Abuse Protection and Local Safety Controls

Opening a public multiplayer room without accounts requires thoughtful anti-abuse engineering. We combine Cloudflare Turnstile verification at room entry, a hidden honeypot field, server-side nickname sanitization, rate-limited chat verification, and instant per-user Mute and Block controls right inside the participant list.

If you mute or block someone in your room, their speech bubbles and break chat messages vanish immediately on your client.