Who this policy covers
This policy applies when you visit immahjong.com, use its learning tools, play a practice hand, create or join a private room, view a profile or leaderboard, or contact us about the service. The service operator is identified publicly as immahjong.
Questions or privacy requests can be sent to support@immahjong.com. The contact page explains what information helps us handle a request safely.
Information we process
Different features use different information. You can use many Beta features as a guest.
Display name, optional profile image, guest or signed-in status, and—when supplied by the connected sign-in service—email address and full name.
Tutorial progress, practice statistics, language, tile style, sound, motion, contrast, labels, contextual tips, and practice speed.
Room code, seat, ready and presence state, game actions, public and private game events, preset reactions, match results, scores, and reconnection state.
Request timestamps, broad referral category, sanitized campaign labels, landing path, product conversion events, and browser or device information that may be processed to measure discovery and reliability. Hosting and security systems may also process an IP address, errors, and abuse-prevention logs. immahjong stores a scoped hash—not the raw address—in its application rate-limit records.
Your email address and the information you choose to include when you contact support, report a security issue, or make a privacy request.
Live payments are disabled during the free Beta. immahjong does not currently collect payment-card details or create paid subscriptions.
Why we use this information
We use information to authenticate players, assign seats, synchronize authoritative game state, reconnect a player, explain results, maintain profiles and leaderboards, remember settings, answer support requests, prevent abuse, diagnose failures, measure which broad search, AI, community, or campaign sources lead to useful product actions, and improve the reliability and accessibility of the Beta.
Where privacy law requires a legal basis, processing may be necessary to provide the service you request, to meet legal obligations, or for legitimate interests such as service security and improvement. Optional device preferences are controlled by you and can be cleared at any time.
Browser and device storage
immahjong stores settings, tutorial progress, guest profile and result information, room or game reconnection tokens, and an anonymous per-tab acquisition session in your browser's local or session storage. The acquisition session keeps only a broad source category, a sanitized campaign label when supplied, and the first public landing path; it does not keep the full referring URL. A reconnection token lets that browser return to the same seat; do not share it.
When you intentionally create an anonymous MCR hand link, its URL contains only tile faces and scoring context such as the win method, Winds, Flowers, and special conditions. It does not include a player name, account, room code, game ID, invitation, reconnect credential, or saved private result. Public teaching-page share buttons similarly remove the current page's query string before sharing.
Necessary storage may also be used by the site, hosting platform, or connected sign-in service to deliver the page securely and maintain a signed-in session. The current Beta does not include an advertising-cookie system.
You can remove immahjong-owned browser storage from the data deletion page. Doing so can remove local progress and prevent reconnection to an active room.
Service providers and disclosure
Information may be processed by infrastructure, hosting, database, identity, security, and support providers only as needed to operate the service. Those providers may process information in countries other than your own under their terms and applicable safeguards.
We may also disclose limited information when required by law, to protect players or the service, or as part of a business reorganization with appropriate notice and protections. The current Beta has no advertising or data-broker integration and does not offer a mechanism to sell player profiles or game histories.
Retention and deletion
We retain information only for as long as reasonably necessary to run the Beta, preserve requested game history, protect the service, resolve disputes, and meet applicable legal obligations. Retention differs by data type. Device-only data remains until you clear it or the browser removes it.
After a verified deletion request, some limited records may remain where permitted or required for security, fraud prevention, legal compliance, dispute handling, or backup integrity. Aggregated or de-identified information that no longer identifies you may also be retained.
Security
We use access controls, player-specific public game views, server-side action validation, hashed server-side reconnection credentials, rate limiting, and other organizational and technical safeguards appropriate to the Beta. No internet service can guarantee absolute security.
If you believe an account, room, or token has been exposed, stop sharing the affected link or token and contact us promptly. Do not send passwords, full card numbers, or identity documents by email.
Your privacy choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to appeal or complain to a data-protection authority. We will not discriminate against you for making a privacy request.
Use the data deletion page for device and server-record instructions, or email support@immahjong.com. We may ask for information reasonably necessary to verify that the request relates to you and will respond within the period required by applicable law.
Children and family use
immahjong is a general-audience learning and board-game service and is not directed to children under 13. We do not ask users to complete age verification during the free Beta.
If you are below the age at which you may consent to online services where you live, use immahjong only with a parent or guardian's permission. If a parent or guardian believes a child provided personal information without the required permission, contact us so we can review and delete it where required.
Changes to this policy
We may update this policy as the Beta changes. Material changes will be shown on the site before they take effect where required. Paid membership and Gold Tables are not open; privacy and billing disclosures will be reviewed before any paid launch.
The effective date at the top identifies this version. Contact support@immahjong.com if you need help understanding it.