Privacy policy

Last updated October 28, 2026

This privacy policy describes how Mahjong Pals ("we," "us," or "our") collects, uses, and discloses information when you use our website, applications, and related services (together, the "Service"). By accessing or using the Service, you agree to this policy. If you do not agree, do not use the Service. This policy is incorporated into and forms part of our Terms of Service.

Information we collect

Account information: when you create an account we collect your email address and a hashed form of your password, or profile information provided by a third-party sign-in provider if you use one. Usage information: we collect gameplay activity and progress, including lessons completed, hands played, statistics, in-game purchases, settings, and friend connections. Payment information: website payments are processed by Stripe. In the iPhone app, Apple processes App Store payments and RevenueCat helps us verify purchases and subscription status. We and RevenueCat receive account identifiers, product and transaction information, subscription status and relevant device/app information. We do not receive or store full payment-card numbers. Technical information: we may collect device, browser, log, and network information, including IP addresses, for security, fraud prevention, and operation of the Service. Communications: if you contact support, we keep the messages and related records.

How we use information

We use the information we collect to provide, operate, maintain, and improve the Service; to create and manage accounts; to process payments and subscriptions; to respond to inquiries and provide support; to send transactional communications such as receipts, password resets, and security notices; to send marketing communications where permitted; to monitor, secure, and protect the Service, our users, and our rights; to comply with legal obligations; and for any other purpose disclosed to you at the time of collection or with your consent.

Cookies and similar technologies

Our website uses a session cookie to keep you signed in; this cookie is required for the website to function. On the website, we use Google Analytics to understand how the Service is used; it sets cookies and collects usage information such as the pages you visit, the device and browser you use, and approximate location. We may also use cookies, pixels, and similar technologies provided by advertising and measurement partners, such as Google and Meta, to measure the effectiveness of our advertising. You can limit or block cookies through your browser settings and through the opt-out tools those partners provide; disabling required cookies may prevent parts of the Service from working.

The native app

The iPhone app stores its sign-in credential and unfinished onboarding preferences in the device's secure storage. Gameplay progress, saved tables, purchases and social features are tied to your account on our servers. Device caches may hold downloaded artwork and audio. The native app does not include the website's advertising pixels or Google Analytics cookies. It does not request access to your camera or photo library.

We measure app opens, onboarding steps, membership offers and checkout outcomes to understand where the app needs improvement. These records include app version, build, operating platform and a random identifier stored on your device. After sign-in, we associate the current journey with your account. We do not include typed onboarding answers, names, emails or passwords in these measurement events. Raw events are kept for up to 180 days; deleting your account also deletes its associated journey events. RevenueCat receives custom membership-offer impressions to help measure subscription conversion.

In versions with Meta App Events enabled, we use Meta to measure and improve ads for Mahjong Pals. We ask for your permission before enabling advertiser tracking. If you allow tracking, Meta may receive your device advertising identifier, app and device information, IP address, app activity such as launches, and App Store product, purchase and subscription events, including amounts and currency. With your tracking permission, Meta may link these events with information from its own services and other apps or websites for advertising and measurement, as described in the Meta Privacy Policy.

You can decline tracking or change your choice in iPhone Settings, under Privacy & Security, then Tracking. Declining does not limit your gameplay, lessons or membership. Without tracking permission, advertiser-ID collection is disabled. Meta may still process app and device information, IP address, launches and purchase events for limited measurement, and Apple supports privacy-preserving, aggregated ad attribution through SKAdNetwork. This measurement does not grant permission to track you across other companies' apps and websites. We do not send your email, display name, friend connections, chat or support messages to Meta through this integration, and do not use substitute identifiers to bypass a denial. Revoking tracking permission disables advertiser-ID collection; limited measurement may continue. Revocation does not automatically erase information already received by Meta.

If you choose Sign in with Google, Google processes your sign-in identity and technical information, including identifiers and IP addresses, to authenticate you, prevent fraud and analyze operation of its sign-in service. IP addresses may be used to estimate general location; the app does not request device location permission. RevenueCat uses account-linked purchase history for subscription verification and purchase analytics. These services have their own privacy disclosures in addition to the data our app sends directly.

How we share information

We share information with service providers that perform functions on our behalf, such as payment processing, email delivery, hosting, content delivery, and analytics or advertising measurement, in each case limited to what the function requires. These providers include Apple and RevenueCat for native purchases, Stripe for web purchases, Resend for email, Meta for native advertising measurement with permission-based tracking, and our hosting and content-delivery providers. Player names and selected badges, gameplay statistics and table presence are visible in the social features where you use them. Reports may be delivered to our private moderation channel for investigation. We may disclose information to comply with applicable law, regulation, legal process, or governmental request; to enforce our terms and policies; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Mahjong Pals, our users, or the public. If we are involved in a merger, acquisition, financing, reorganization, or sale of all or part of our assets, information may be transferred as part of that transaction. We do not exchange personal information for money. Advertising-related disclosures may be considered a sale or sharing under some privacy laws. You can opt out of native Meta tracking through the iPhone controls described above, and contact us about applicable privacy rights using the support details below.

Email communications

We send transactional email, such as receipts, password resets, and account or security notices, to all account holders as part of operating the Service. Marketing email is sent only where permitted by law. In native signup, optional marketing email starts turned off. You can choose it when creating your account and change Weekly newsletter and Offers & membership reminders separately in Settings. Every marketing message includes an unsubscribe mechanism. Unsubscribing from marketing email does not stop transactional messages.

Data retention

We retain information for as long as your account exists or as needed to provide the Service, and thereafter as necessary to comply with legal, tax, accounting, and reporting obligations, resolve disputes, enforce agreements, and protect our legal rights. When information is no longer required for these purposes, we delete or de-identify it.

Security

We use commercially reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot and do not guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Your choices and rights

You can delete your account in the iPhone app under Account, then Delete account. This removes your account and associated gameplay records; it does not cancel an App Store subscription. Cancel renewal in your Apple Account subscription settings separately. You may also request access to, correction of, or deletion of your account and associated personal information by contacting us through the support page or at support@mahjongpals.com. Depending on where you live, you may have additional rights under applicable law, including rights to know, correct, delete, or limit certain uses of your personal information; we honor verifiable requests as required by the law that applies to you. We do not discriminate against you for exercising these rights.

Children

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us through the support page or at support@mahjongpals.com and we will delete it.

International users

The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date above, and for material changes we may provide additional notice, such as by email or a notice within the Service. Your continued use of the Service after an updated policy takes effect constitutes acceptance of the updated policy. The current version is always available at this address.

Contact

Questions about this policy or requests concerning your information can be sent through the support page at mahjongpals.com/support or by email to support@mahjongpals.com.