Privacy Policy

Effective Date: October 26, 2026 · Last Updated: October 27, 2026

1. Information We Collect

Account and Identity Information

We collect information necessary to identify your account, save your progress, and provide game features.

• Device ID: The game creates a random identifier for each installation. This is not your device's advertising ID. Guest players are identified using this random ID.
• Sign-in information: If you sign in using email, Apple, or Google, we process the account identifier associated with your sign-in method. Google Firebase handles email authentication. Our game server stores the account ID rather than your email address.
• Discord information: If you access Mahjong Mini through Discord, we collect your Discord user ID and access your Discord display name.
• Display name: We store the name you choose or a randomly generated name assigned by the game.

Gameplay and Progress

We collect gameplay information to save progress, verify results, and provide game features.

This includes:

• Virtual currencies, including Coins, Jade, and Tea Leaves.
• Experience points (XP), player level, and progression.
• Owned and equipped items, cosmetics, and colorways.
• Missions, login calendar progress, season pass progress, and events.
• Game statistics, hands played and won, and match results.
• Puzzle ratings and ranked ratings.
• Gameplay hands and moves needed to verify results.

Solo hands are sent to our servers to verify match results.

Some gameplay information may be visible to other players, including your display name, leaderboard rankings, Tea House membership, and qualifying hands featured in Best Hand of the Week.

For Discord gameplay, we may store the IDs of Discord servers where you have played to support server-specific leaderboards. These are recorded only after Discord confirms your participation.

Anonymous Hand Records

We keep an anonymous copy of each finished hand our servers have verified, separate from your account. We use these records to study how Mahjong Mini is played and to build and test hand analysis and computer players.

Each record contains:

• The moves of the hand, the rules it was played under, and its result.
• The day it was played (not the time).
• For each seat, whether it was a person or a computer player. For a person, only a level range (for example, 11–30), the ranked tier at ranked tables, the app version, whether they were away from an online table (so the game played for them), and whether Coach at the Table was on.

A record never includes your account ID, device ID, display name, email address, IP address, Discord or Tea House details, or the time of day, so it cannot be linked back to you or your account.

Social Features and Player Safety

We collect information needed to support multiplayer and social features, including:

• Friends lists and friend requests.
• Table invitations and associated player names.
• Players you have blocked.
• Player reports, including the selected reason for reporting.
• Account moderation and ban records.

Mahjong Mini does not include free-form text chat. Players communicate using preset emotes.

Account bans are applied to accounts rather than IP addresses.

Reminders and Notifications

If you enable reminders, we may process:

• Your enabled reminder preferences.
• Your time zone.
• The hour you typically play.
• Records of when reminders were sent.

Discord reminders are delivered through direct messages using your Discord user ID.

On iOS, reminders are scheduled locally on your device.

You can disable optional reminders through the available game or device settings.

Purchases

If you purchase items using real money, payments are handled by the relevant platform and payment services.

For Apple purchases, we use RevenueCat to help verify transactions. Discord purchases are processed through Discord.

We may receive and retain purchase information, including the purchased product, transaction identifier, purchase history, and fulfillment status.

We do not receive or store your full payment card details.

Advertising

Advertisements are currently disabled in Mahjong Mini.

If optional rewarded advertisements are enabled in the future, they will be configured to request non-personalized ads through Google AdMob.

Google may process technical information, including IP addresses and device information, to deliver advertisements, measure performance, and prevent fraud.

We may maintain records necessary to verify and grant in-game advertising rewards.

We will update our privacy disclosures as needed when advertising functionality changes.

Technical Information and Diagnostics

We process limited technical information to operate the game, prevent abuse, and investigate technical issues.

• IP addresses: Used for security and rate limiting. Our application stores salted, one-way hashes rather than raw IP addresses for these purposes.
• Crash reports: May include error messages, the affected screen, app version, and platform. These reports are not intentionally associated with player identifiers.
• Usage statistics: Include counts of sessions, matches started and finished, matchmaking wait times, dropped connections, and similar events, used to keep the game running well. They are not tied to your name or email address and are not used for advertising.
• Returning players: To count how many players come back (for example, the next day or a week later), we record the day a profile was first seen and the days it was active. The profile is recorded only as a salted, one-way code, never its account ID or device ID.
• Server logs: Our servers log requests and errors so we can fix problems. Account IDs, device IDs, sign-in tokens, and IP addresses are removed from these logs or replaced with one-way codes.
• Web analytics: On the web version only (not the iOS app or Discord), Cloudflare Web Analytics counts page visits and load times. It does not use cookies or track you across sites.

Invitations

If you invite a new player and they join, we record that the invitation was used so both of you can receive the invite reward. To make sure a reward is claimed only once per device, we keep a salted, one-way code of the new player's device ID, not the ID itself.

2. How We Use Information

We use the information described above to:

• Provide and operate the game, your account, and your saved progress.
• Verify hands and results so rewards, ratings, and leaderboards are fair.
• Run online tables, matchmaking, Tea Houses, friends, invitations, and other social features.
• Process and verify purchases, subscriptions, and rewards, and grant purchased items.
• Send reminders you have turned on.
• Prevent cheating, fraud, and abuse, review player reports, and enforce our Terms of Service.
• Diagnose errors and improve stability, performance, and the player experience.
• Study how the game is played and develop hand analysis and computer players, using anonymous hand records that are not linked to you.
• Respond to support requests.

Legal Bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process personal data to perform our contract with you (running your account, gameplay, saved progress, social features, and purchases); for our legitimate interests (keeping the game secure and fair, preventing fraud and cheating, understanding and improving the game, and providing support), balanced against your rights; to comply with legal obligations (such as keeping transaction records for tax and accounting); and, where we ask for it, with your consent, which you may withdraw at any time. Anonymous hand records do not identify you and are not personal data.

3. Service Providers

We use the following providers to operate Mahjong Mini. They process information on our behalf under their own privacy policies:

Their privacy policies: Cloudflare, Google and Firebase, Apple, RevenueCat, and Discord.

4. Sharing and Disclosure

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• We share information with the service providers above only as needed to operate the game.
• Your display name, avatar, title, level, and in-game activity are visible to players you play with, and some of it appears on leaderboards, in Tea Houses, and in Best Hand of the Week.
• We may disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, and security of our players, ourselves, or others.

5. Data Retention

• Account and gameplay data are kept while your account is active.
• Purchase records are kept as long as needed for fulfillment, support, fraud prevention, and legal and accounting obligations.
• Server logs are kept for a short period (days, not months). Crash reports and usage statistics are kept for up to about three months.
• Player reports are kept until reviewed and as long as needed to handle repeat problems. Ban records are kept for as long as a ban lasts and a reasonable time after.
• Anonymous hand records may be kept indefinitely. Because nothing in them links them to you or your account, they are not affected when you delete your account.

When you delete your account, we delete or de-identify the personal data associated with it, except records we must keep for legal, accounting, or fraud-prevention purposes.

6. Your Rights and Choices

Depending on where you live (for example, the EEA or UK under the GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To make a request, contact us at dumplingfishgames@gmail.com.

• Delete your account: In the game, go to Profile, then Account, then Delete Account, or contact us. Deleting an account does not cancel a subscription billed by an app store; cancel it in that store's settings.
• Reminders: Turn them off in the game's settings or your device settings.
• Play as a guest: You can play without signing in; your progress is then tied to your device's random ID.

We will not discriminate against you for exercising these rights. If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.

7. Children's Privacy

Mahjong Mini is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

8. International Transfers

Our service providers may process and store data in countries other than yours. Where required, we and our providers use appropriate safeguards for these transfers.

9. Security

We and our service providers use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last Updated" date above and, for material changes, provide a more prominent notice where appropriate.

11. Contact Us

Questions or requests: dumplingfishgames@gmail.com — dumplingfish, a sole proprietorship.