Privacy Policy

Effective date: February 15, 2026 · Last updated: July 24, 2026

Filipino Mahjong Online ("the App") is a free-to-play Filipino Mahjong game for web, iOS, and Android. This policy explains what data the App collects, how it is used, and your rights.

You can play the whole game without an account. Signing in is optional and adds saved play history, a profile, and friends. This policy covers both cases and says which is which.

Data We Collect

When you play

Your display name. You choose it, and it is shown to the other players in your game. It is also saved with the record of each round you play, and it is the name shown in your own play history.
Game records. When a round finishes we save a record of it: the room code, timestamps, seat positions, who dealt, who won, points scored, the tiles in the finished hand, and the house rules in effect. This is what powers your play history and our understanding of how the game is played. Rounds from single-player mode are saved the same way.
A random device identifier. Generated on your device the first time you play. It has no relation to your device hardware and is not an advertising ID. It is what ties your rounds together into a history when you have no account. We also record which client you last used (web, iOS, or Android) and its version.

Without an account, none of the above is linked to your identity — it is tied only to that random identifier, which you can reset by clearing the App's data.

If you create an account (optional)

Accounts are passwordless. You sign in with Google, Apple, or Facebook, or with a six-digit code sent to your email address. When you do, we collect:

Your email address, when your sign-in method provides one. Signing in by email always does; Google and Apple normally do; Facebook may not — an account registered only to a phone number, for example. The App works either way.
An identifier from that provider, plus the basic profile information it returns — typically your name and profile picture URL. We do not receive your password, your contacts, your friends list, or permission to post anything.
Your profile in the App — the display name you choose and which of our preset avatars you pick. We do not host uploaded images.
A link between your account and the device identifier above, which carries your existing play history into your account and keeps it with you as you move between devices.

If your sign-in method shares a verified email address matching an account you already have, the two are linked into a single account rather than creating a duplicate.

If you use Friends

Your friend list — who you have sent requests to or accepted them from, the status of each, and when.
A friend code generated for your account so other players can add you.
Game invitations you send or receive, including the room code and when the invitation expires.

Friends can see your display name, your avatar, and whether you are currently at a table, so they know when you are free to play. Players who finished a round with you in the last 30 days can see your display name, avatar, and when you last played, so they can send you a friend request. Nobody can see your email address.

If you send feedback or react to an update

Feedback you send us from inside the App — your message, your email address if you choose to add one, the time, and the IP address the request came from. It is emailed to us through Resend. If you tick the box asking to hear back about updates, your email address is added to our mailing list.
Votes and comments on "What's New" — stored with your identifier and the time, so each player counts once. A comment is also emailed to us, including the IP address it came from.

All of this is optional. The game works exactly the same if you never use either.

Data We Do Not Collect

No passwords — there are none, on our side or yours
No phone numbers
No financial or payment information (the App is free with no in-app purchases)
No advertising identifiers such as IDFA or the Android Advertising ID — the web version's ads use cookies instead (see Advertising below)
No photos, files, or media from your device, and no uploaded profile pictures
No contacts, address book, or friends list from your sign-in provider
No browsing or search history from other sites or apps — analytics does record which screens you open inside the App, as described below
No location data in the mobile apps (the web version may derive approximate location, such as country or city, from your IP address for analytics — see Analytics below)
No free-text chat — the App has no chat box. In-game reactions are picked from a fixed set; they are not saved to your play history, though analytics records which one was sent

Analytics

The App (web, iOS, and Android) uses PostHog for usage analytics, to understand how the game is played and to fix problems. Analytics data includes:

Product interaction events — for example when a game starts, a round ends, a room is created or joined, an in-game reaction is sent (which one, from the fixed set), or a tutorial lesson is completed
Which screens you open inside the App, and the address of the page you arrived from on the web
An analytics identifier that PostHog creates and stores on your device. It is separate from the random game identifier described above, and the two are never joined together. It is reset when you sign out
Your display name, which lets us give a specific player early access to a new feature, or reproduce a problem they have reported
Device and app information — operating system, screen size, platform (web, iOS, or Android), and language
Error reports — technical details of crashes and errors, so we can fix bugs. These are also processed by Sentry

We do not send your email address to analytics.

On the iOS and Android apps, session recording is disabled (we never capture a replay of your screen on mobile) and IP-based location enrichment is turned off. The web version may use session recording with all text inputs masked, and may derive approximate location (country or city) from your IP address.

Advertising

The web version of the App (at filipinomahjongonline.com) displays ads served by Google AdSense. The iOS and Android apps show no ads.

Google and its advertising partners use cookies and similar technologies to serve ads and measure their performance. These may be used to show you ads based on your prior visits to this and other websites.
We do not share your display name, email address, room codes, or gameplay data with advertisers. The ad cookies are set and read by Google under its own policies, not by us.
Ads are labelled as advertising (for example, “Sponsored”) and appear only in the web version of the App.

You can control the ads you see and opt out of personalized advertising:

Manage or turn off ad personalization at Google Ad Settings.
Read how Google uses information from sites that use its services in Google's “partner sites” notice.
Opt out of personalized advertising from many providers at aboutads.info or, in Europe, Your Online Choices.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you will be shown a consent message before any non-essential advertising cookies are used, and you can decline personalized ads. Your choice is saved and can be changed at any time.

Local Storage

The App stores a small amount of data locally on your device:

Your sign-in session, if you have an account, so you stay signed in between visits. Signing out removes it.
A session token to enable reconnection if you are temporarily disconnected during a game.
Your display name, remembered for convenience so you don't have to retype it.
The random identifier described above, and separately PostHog's own analytics identifier.
Your single-player game in progress, so you can close the App and pick it up later, along with any finished single-player rounds still waiting to be sent to us.

Clearing your browser site data (web) or the app's storage (mobile) removes all of the above.

Who Processes Your Data

We do not sell your personal data. We use these providers to run the App, each processing data on our instructions:

Supabase — sign-in, and the database holding accounts, play history, and friends
Fly.io — the game server that runs live games
Cloudflare — website hosting and delivery
PostHog and Sentry — analytics and error reporting
Resend — delivering feedback and update comments to us by email
Google AdSense — ads on the web version only, under Google's own policies as described above

These providers store data on servers in the United States. If you sign in with Google, Apple, or Facebook, that sign-in happens with them under their own privacy policies: they tell us who you are, and we tell them nothing about how you play.

Data Retention & Deletion

Game records are kept so your play history stays available. They are not deleted automatically.
Analytics events are retained in PostHog for up to 12 months and then deleted.
Deleting your account. Open your profile in the App and choose to delete your account. Your profile is marked deleted and your display name and avatar are removed — including from the shared game records other players can see, where you appear afterwards as "Deleted Player". The rounds themselves are kept in that anonymized form. We also block sign-in to the deleted account; if that step cannot be completed at the time, we act on it when you tell us.
Other requests. Email privacy@filipinomahjongonline.com to ask what we hold about you or to have it erased. If you play without an account, include the approximate dates you played and your platform (web, iOS, or Android) so we can find the records — without an account there is nothing tying them to you.

Voice Chat & Microphone Access

The iOS app does not include voice chat and does not request microphone access.

On platforms where voice chat is available, it is optional. When you enable voice chat:

The App may request access to your device's microphone (for example, the RECORD_AUDIO permission on Android)
Audio is transmitted in real time to other players in the same game room and is not recorded or stored on our servers
You can mute or disable voice chat at any time during gameplay
If you deny microphone access, the rest of the App functions normally — voice chat is entirely optional

Network Communication

The App connects to our game server via encrypted WebSocket (WSS) for real-time gameplay synchronization, and sends analytics events to PostHog as described above. All communication uses HTTPS/TLS encryption.

Children's Privacy

The App is a general-audience game and is not directed to children under 13. It has no free-text chat; the only things other players see are a display name, an avatar chosen from our presets, and in-game reactions from a fixed set. We do not knowingly collect personal information from children under 13, and we do not knowingly show them personalized ads. If we learn that we have collected personal information from a child under 13, we will delete it — contact us at the address below.

Changes to This Policy

If we make material changes to this privacy policy, we will update the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact

For privacy questions or concerns, please email privacy@filipinomahjongonline.com or open an issue at our GitHub repository.