Privacy Policy.

• Account and member details. Your email, display name and profile details let us sign you in and identify you at the table. Member verification also collects your full name, date of birth, phone number, country, city and gender choice to check adult eligibility, verify contact details and maintain your membership record.
• Game history. Hands you've scored, tables you've sat at, replays. We use this to show you your stats and improve the engine.
• Voice audio (only when you turn voice on). Sent to a third-party speech-to-text provider for tile recognition. We do not store the audio after processing.
• Browser and device metadata. Standard server logs (IP, user agent, timestamps) to keep the service running and debug issues.
• Marketplace transactions. When you buy or sell, we keep order records (item, price, parties) for tax and dispute resolution.

We use cookies and browser storage for sign-in, preferences, attribution and queued activity. Where analytics or advertising is enabled, third-party providers including Google and Meta may place and read cookies, use web beacons or pixels, and receive IP addresses or other identifiers to measure activity, deliver services and prevent fraud. Google may use information from sites and apps that use its services as described in How Google uses information from sites or apps that use our services.

The analytics and advertising choices below control the corresponding features. You can also manage cookies through your browser settings; blocking necessary cookies may prevent sign-in or stop some preferences from being remembered.

Miss Flower's answers are written by Google (Gemini), so your question and the recent conversation are sent to Google to answer it. To work out what kind of question you are asking, such as which game you mean or whether you want to see a hand, the first 500 characters of your current question may also be sent to OpenRouter and to Google. Your earlier messages are not sent for that step. Whatever you type into a question goes with it, including anything personal, so please leave out details you would rather not share.

• We do not sell your data.
• We do not give direct sponsors your email, phone number, name, or chat. Measurement and advertising providers receive the signals described below. Visiting an advertiser's website is subject to that website's privacy policy.
• We do not store your voice recordings.
• We do not read your chat for marketing. Only for safety.

We use Google Analytics 4 to understand how the game is used (pages visited, games started and finished, tutorial progress, purchases) and the Meta pixel to measure whether our own Instagram ads brought you here. What that means in practice:

• Analytics events carry a random account identifier — never your email, phone, name, or chat. Payment events carry the amount and an order id, never card or bank details.
• If you signed in, we may share your email and phone with Meta in hashed form (one-way scrambled in your browser before anything is sent) purely so Meta can match ad views to sign-ups from our own campaigns.
• A small first-party cookie (pm_attr) remembers which link or campaign first brought you to us. It never leaves our servers.
• You can opt out any time from your profile page (Privacy → Analytics). Opting out stops Google Analytics and Meta tracking for your account on every device — both the in-browser tags and the events our servers send.
• Visitors in the EEA and UK get Google's analytics and ad signals switched off by default (Consent Mode denied-by-default for those regions). Meta measurement is controlled by the opt-out above.

Where advertising is available, sponsor messages and game-end ads require your advertising choices. You can turn them off in advertising settings. These choices are separate from accepting the Terms. We exclude accounts that are not verified as adults, accounts with ad-free access, and accounts that have opted out of analytics. Your choices apply to your account. If you turn ads off while offline, they stop on that device immediately; the choice reaches our server when the connection returns.

• Our delivery records. We record which ad was selected, whether it loaded, appeared or was clicked, its placement and time, and a random event identifier. These records can be linked to your account for delivery limits, accurate reporting and abuse prevention. Sponsors receive aggregate reports, not your account-level activity.
• Ad trials. With advertising measurement permission, we may compare return visits and completed games for eligible accounts and a control group. This uses first-party activity from the seven days before and after joining a trial to check how ads affect the game experience. Either enabled advertising choice permits this measurement; turning both choices off ends your participation.
• Google advertising services. Eligible game-end ads may use Google AdMob in the apps or AdSense for games on the web. Google may receive IP-derived approximate location, device or app identifiers, ad interactions and diagnostic data for advertising, measurement and fraud prevention. On the web, Google may place and read cookies or use web beacons as a result of ad serving. Non-personalized ads can still use cookies and identifiers for delivery, measurement and fraud prevention. Google's privacy choices are shown where required, and can be reopened from advertising settings when available. See Google's advertising privacy information.
• Retention. Our advertising worker removes account identifiers from ad delivery records after 30 days or account deletion. Processed event detail is retained for up to 90 days; anonymous totals and commercial records remain for reporting and accounting. Pending events on your device are cleared when you withdraw advertising permission or change accounts; expired queued events are removed when the app or site next processes them.
• Reporting an ad. “Report this ad” sends the selected reason and the ad reference to our moderation team. This is your explicit request and remains available even if you have turned advertising measurement off. We remove the reporter's account link after 30 days or account deletion and retain the report for moderation.

Planet Mahjong is for adults aged eighteen and older, as described in our Terms. We use the member verification details described above to check adult eligibility. If you believe a child has provided personal information to us, contact hello@planetmahjong.com so we can review the account and address the information.

Email hello@planetmahjong.com and we will:

• Tell you exactly what we have on you.
• Delete it on request, or you can delete your own account any time from your profile page: your name, username, avatar, and email get scrubbed for good. Some legal records (orders, tax) stay on file as required by law, kept apart from your identity.
• Export it for you in a plain JSON dump.

Planet Mahjong is in beta. We may reset data during major migrations. If we do, we'll warn you in advance. You can contact us about your information using the privacy contact above.

When you click I understand. Let's play. on the landing page, we record one row in our consent log: a per-device random identifier, your IP address, your browser user agent, and the timestamp. That's the legal evidence you accepted the disclaimer. We hold these rows for 12 months and then delete them. Authenticated consents (Terms, Vendor Agreement) live with your account and follow the retention rules of your account itself.

We update this policy as our services and data practices change. The date at the top identifies the current version. Contact hello@planetmahjong.com if you have a question about this policy or want to exercise the rights described above.