Privacy policy
Updated September 4, 2026
This is the whole policy, written to be read. Mahjong Pals is a game, not a data business: we collect what running your account requires, we sell nothing to anyone, and we show no ads.
What we collect
Your email address and a hashed password when you create an account, or your provider profile if you sign in another way. Your gameplay progress: lessons completed, hands played, stats, purchases made with in-game currency, settings, and your friend connections. If you subscribe, our payment processor collects your card details; card numbers never reach our servers and we never see them.
Analytics
Our analytics are anonymous and cookieless. Your device keeps a random identifier that is not linked to your account or email, and gameplay events (a hand played, a lesson finished) are recorded against it so we can see what's working. No advertising trackers, no fingerprinting, no third-party analytics scripts.
Cookies
One kind: the session cookie that keeps you signed in. There is no cookie banner because there is nothing to consent to.
Who touches your data
Three service providers, each doing one job: Stripe processes payments, Resend delivers our email, and our hosting and content delivery providers serve the site. Each receives only what its job requires. We do not sell, rent, or trade personal information, and we disclose it beyond these providers only if the law compels us.
Account emails (receipts, password resets, security notices) go to every account. Marketing email and the weekly letter go only to addresses that opted in, every one carries an unsubscribe link, and unsubscribing works the first time.
Retention and deletion
We keep account data while the account exists. Ask us to delete your account and we delete it, along with its progress and personal information, keeping only what tax and payment law requires us to hold. Write to support through the app to start that.
Children
Mahjong Pals is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.
Changes
If this policy changes in substance, we update the date above and, for meaningful changes, tell account holders by email. The current version always lives at this address.