• Email and display name. To sign you in and put a name on your scoreboard. That's it on identity.
• Game history. Hands you've scored, tables you've sat at, replays. We use this to show you your stats and improve the engine.
• Voice audio (only when you turn voice on). Sent to a third-party speech-to-text provider for tile recognition. We do not store the audio after processing.
• Browser and device metadata. Standard server logs (IP, user agent, timestamps) to keep the service running and debug issues.
• Marketplace transactions. When you buy or sell, we keep order records (item, price, parties) for tax and dispute resolution.

Miss Flower's answers are written by Google (Gemini), so your question and the recent conversation are sent to Google to answer it. To work out what kind of question you are asking, such as which game you mean or whether you want to see a hand, the first 500 characters of your current question may also be sent to OpenRouter and to Google. Your earlier messages are not sent for that step. Whatever you type into a question goes with it, including anything personal, so please leave out details you would rather not share.

• We do not sell your data.
• We do not give direct sponsors your email, phone number, name, or chat. Measurement and advertising providers receive the signals described below. Visiting an advertiser's website is subject to that website's privacy policy.
• We do not store your voice recordings.
• We do not read your chat for marketing. Only for safety.

We use Google Analytics 4 to understand how the game is used (pages visited, games started and finished, tutorial progress, purchases) and the Meta pixel to measure whether our own Instagram ads brought you here. What that means in practice:

• Analytics events carry a random account identifier — never your email, phone, name, or chat. Payment events carry the amount and an order id, never card or bank details.
• If you signed in, we may share your email and phone with Meta in hashed form (one-way scrambled in your browser before anything is sent) purely so Meta can match ad views to sign-ups from our own campaigns.
• A small first-party cookie (pm_attr) remembers which link or campaign first brought you to us. It never leaves our servers.
• You can opt out any time from your profile page (Privacy → Analytics). Opting out stops Google Analytics and Meta tracking for your account on every device — both the in-browser tags and the events our servers send.
• Visitors in the EEA and UK get Google's analytics and ad signals switched off by default (Consent Mode denied-by-default for those regions). Meta measurement is controlled by the opt-out above.

Where advertising is available, sponsor messages and game-end ads require your advertising choices. You can turn them off in advertising settings. These choices are separate from accepting the Terms. We exclude accounts that are not verified as adults, accounts with ad-free access, and accounts that have opted out of analytics. Your choices apply to your account. If you turn ads off while offline, they stop on that device immediately; the choice reaches our server when the connection returns.

• Our delivery records. We record which ad was selected, whether it loaded, appeared or was clicked, its placement and time, and a random event identifier. These records can be linked to your account for delivery limits, accurate reporting and abuse prevention. Sponsors receive aggregate reports, not your account-level activity.
• Ad trials. With advertising measurement permission, we may compare return visits and completed games for eligible accounts and a control group. This uses first-party activity from the seven days before and after joining a trial to check how ads affect the game experience. Either enabled advertising choice permits this measurement; turning both choices off ends your participation.
• Google advertising services. Eligible game-end ads may use Google AdMob in the apps or AdSense for games on the web. Google may receive IP-derived approximate location, device or app identifiers, ad interactions and diagnostic data for advertising, measurement and fraud prevention. Non-personalized ads can still use this data. Google's privacy choices are shown where required, and can be reopened from advertising settings. See Google's advertising privacy information.
• Retention. Our advertising worker removes account identifiers from ad delivery records after 30 days or account deletion. Processed event detail is retained for up to 90 days; anonymous totals and commercial records remain for reporting and accounting. Pending events on your device are cleared when you withdraw advertising permission or change accounts; expired queued events are removed when the app or site next processes them.
• Reporting an ad. “Report this ad” sends the selected reason and the ad reference to our moderation team. This is your explicit request and remains available even if you have turned advertising measurement off. We remove the reporter's account link after 30 days or account deletion and retain the report for moderation.

Email hello@planetmahjong.com and we will:

• Tell you exactly what we have on you.
• Delete it on request, or you can delete your own account any time from your profile page: your name, username, avatar, and email get scrubbed for good. Some legal records (orders, tax) stay on file as required by law, kept apart from your identity.
• Export it for you in a plain JSON dump.

Planet Mahjong is in beta. We may reset data during major migrations. If we do, we'll warn you in advance. The full Privacy Policy will cover how this interacts with your rights above.

When you click I understand. Let's play. on the landing page, we record one row in our consent log: a per-device random identifier, your IP address, your browser user agent, and the timestamp. That's the legal evidence you accepted the disclaimer. We hold these rows for 12 months and then delete them. Authenticated consents (Terms, Vendor Agreement) live with your account and follow the retention rules of your account itself.

The complete policy will cover cookies, analytics tooling, retention windows, jurisdictional rights (DPDP, GDPR, CCPA), children's data, security practices, and incident notification. If you want to be pinged when it ships, drop us a line.