Our full privacy policy is being written. We're cooking up something genuinely good: clear, plain-spoken, no dark patterns.
Until it ships, here's an honest summary of what we collect, why, and what we never do. Treat this as a binding plain-language commitment until the formal policy lands.
- Email and display name. To sign you in and put a name on your scoreboard. That's it on identity.
- Game history. Hands you've scored, tables you've sat at, replays. We use this to show you your stats and improve the engine.
- Voice audio (only when you turn voice on). Sent to a third-party speech-to-text provider for tile recognition. We do not store the audio after processing.
- Browser and device metadata. Standard server logs (IP, user agent, timestamps) to keep the service running and debug issues.
- Marketplace transactions. When you buy or sell, we keep order records (item, price, parties) for tax and dispute resolution.
- We do not sell your data.
- We do not hand your personal details to advertisers. The one nuance: measurement tools (below) receive pseudonymous or hashed signals so we can tell whether our own ads worked. Nothing there is sold, rented, or usable to contact you.
- We do not store your voice recordings.
- We do not read your chat for marketing. Only for safety.
We use Google Analytics 4 to understand how the game is used (pages visited, games started and finished, tutorial progress, purchases) and the Meta pixel to measure whether our own Instagram ads brought you here. What that means in practice:
- Analytics events carry a random account identifier — never your email, phone, name, or chat. Payment events carry the amount and an order id, never card or bank details.
- If you signed in, we may share your email and phone with Meta in hashed form (one-way scrambled in your browser before anything is sent) purely so Meta can match ad views to sign-ups from our own campaigns.
- A small first-party cookie (pm_attr) remembers which link or campaign first brought you to us. It never leaves our servers.
- You can opt out any time from your profile page (Privacy → Analytics). Opting out stops Google Analytics and Meta tracking for your account on every device — both the in-browser tags and the events our servers send.
- Visitors in the EEA and UK get Google's analytics and ad signals switched off by default (Consent Mode denied-by-default for those regions). Meta measurement is controlled by the opt-out above.
Email hello@planetmahjong.com and we will:
- Tell you exactly what we have on you.
- Delete it on request, or you can delete your own account any time from your profile page: your name, username, avatar, and email get scrubbed for good. Some legal records (orders, tax) stay on file as required by law, kept apart from your identity.
- Export it for you in a plain JSON dump.
Planet Mahjong is in beta. We may reset data during major migrations. If we do, we'll warn you in advance. The full Privacy Policy will cover how this interacts with your rights above.
When you click I understand. Let's play. on the landing page, we record one row in our consent log: a per-device random identifier, your IP address, your browser user agent, and the timestamp. That's the legal evidence you accepted the disclaimer. We hold these rows for 12 months and then delete them. Authenticated consents (Terms, Vendor Agreement) live with your account and follow the retention rules of your account itself.
The complete policy will cover cookies, analytics tooling, retention windows, jurisdictional rights (DPDP, GDPR, CCPA), children's data, security practices, and incident notification. If you want to be pinged when it ships, drop us a line.