Mahjong Tide

Privacy policy

You can play Mahjong Tide without an account. We keep the small set of gameplay facts used to operate and improve the game; an account also lets you sign in and sync your game across devices.

Controller and contact

The controller is Sylvain GRAVEJAT EI, a French sole trader operating Mahjong Tide, at 60 rue François 1er, 75008 Paris, France. For any question or request about your data, email contact@mahjongtide.com. Registration details appear in the legal notice and service rules in the Terms of Use and Sale.

What we keep

• your email address, an internal account ID, and account creation and last sign-in dates;
• the player name you choose;
• your synced progress, rewards, and custom layouts;
• a gameplay history limited to engaged sessions, boards started and finished, mode, layout, time, best chain, assistance used, Journey milestones, and observed badges. We also keep language, a broad device category, referring site, and any campaign; never mouse movements or every tile played;
• when a technical error occurs, a report containing its message and stack, the route without parameters, and technical browser and device information. An IP address is necessary to transmit the report, but the tool is configured not to attach your account, email address, cookies, request or form bodies, click history, or a session recording;
• if you make this choice in Account, your preference to receive Mahjong Tide news and Tide Plus offers, together with the date and version of that choice;
• if you send in-game feedback, the text entered under what you enjoy, what could improve, and ideas, plus the language and mode from which the form was opened. If you separately allow a public quotation of your positive answer, we also keep the chosen name and the version and time of that permission. Feedback sent while signed in is attached to the account; while signed out, no browser or network identifier is added to the message;
• the sign-in method connected to the account; if you choose Google, its stable account identifier and your verified email address. Mahjong Tide does not retain your Google profile name or photo, or Google access, refresh, or ID tokens.
• if you create a recovery code, only its cryptographic digest and creation date; during recovery, the proposed new address and a temporary challenge.
• if you purchase Mahjong Tide Plus, the selected plan, its status and dates, the timestamp of your sale-terms acceptance, and the technical Stripe/Link identifiers needed to reconcile the payment, subscription, refund, or dispute with your account. If you exercise a withdrawal right, we keep the request, its timestamp and status, your first and last name, the contract reference, your exact declaration, and the email address used for its acknowledgement. Mahjong Tide does not receive or retain your full card number.

Without an account, progress and preferences remain in your browser’s local storage and are not uploaded by account sync. Gameplay measurement uses a random browser ID, which the server transforms into a non-reversible digest to connect sessions and boards played in that browser. If you later choose to attach the local progress to your account, this history is attached with it.

Why we use it

We use this information to provide the account you requested: sign-in, cross-device sync, and game recovery. Gameplay history and aggregate measures let us understand which modes are actually played, where players leave the Journey, and whether new work improves the game. Service security, code-attempt limiting, game improvement, and the error reports strictly needed for technical diagnosis are based on our legitimate interest in operating and protecting Mahjong Tide.

If you purchase Mahjong Tide Plus, order information is used to perform the purchase, activate the features, manage the subscription, and meet accounting and legal obligations.

Email news and offers are based only on your consent. They are off by default. You can turn them on or off at any time in Account, and every message will provide a simple way to unsubscribe.

Feedback is used to improve the game on the basis of our legitimate interest. A positive answer is quoted publicly only if you select the dedicated permission; that permission is optional and can be withdrawn at any time.

Your player profile

Your player name identifies your profile inside the game. Mahjong Tide does not publish that name or your email address on a public leaderboard.

Multiplayer tables

When you open or join a multiplayer table, the game connects to our table server. While the table is open, the server holds in memory the player name you chose, a random identifier your browser keeps so that you can rejoin after a dropped connection, and the moves played at the table. The other players at that table see your player name and your moves. Tables are not written to our database: a table is forgotten once it has closed. If you are signed in, the results of your finished rounds are added to your synced progress.

Your IP address is used in memory, for as long as it is needed, to limit connection attempts and protect the service. It is not kept with the table.

Mahjong Tide on Poki

The edition of Mahjong Tide published on Poki has its own, shorter privacy policy: mahjongtide.com/privacy/poki.

Service providers

Data may be processed by Hetzner for hosting in Germany, Cloudflare for delivery, security, backups and, if enabled, cookieless audience measurement, Resend for delivering sign-in codes, withdrawal acknowledgements, and optional emails you requested, and Better Stack, in its German region, for availability monitoring and technical error reports. Google is involved if you choose Google sign-in and, in the ad-supported free version, provides AdSense and the interface for making and changing advertising choices. For a web Tide Plus purchase, Stripe and Link act as merchant of record and process payment, indirect taxes, receipts, order management, and transaction support. Some providers may process data outside the European Economic Area under their applicable contractual safeguards. Mahjong Tide does not sell your account or game data.

How long we keep it

• account and game data remain until the account is deleted;
• detailed session, board, and milestone history remains available to measure progress over time and support a future player-facing history;
• your email preference remains linked to the account until you change it or delete the account;
• feedback remains until its linked account is deleted or you ask us to remove it; for signed-out feedback, include its displayed reference in your request;
• a verification code expires after 10 minutes and can be used only once;
• the recovery-code digest remains attached to the account until the code is used, replaced, or the account is deleted; the readable code is not retained;
• attempt-limiting records are temporary and held in memory;
• technical error reports are retained by Better Stack for 90 days;
• order data, withdrawal requests, and accounting records are retained for the period required by tax, accounting, and legal-claims obligations, including after account deletion; they are then separated from the active game profile;
• after deletion, a copy may remain for up to 30 days in encrypted, locked disaster-recovery backups, used only to restore the complete service after a failure.

Your choices and rights

In Account you can change your name or email, create or replace a recovery code, manage optional emails, download the information Mahjong Tide holds, and delete the account. Recovery requires the saved code and then verification of a new email address; the saved code is destroyed when used. Deletion removes the active account, email preference, recovery credentials, synced progress, custom layouts, and gameplay history attached to the account. A renewing subscription must first be made non-renewing in Account; it can also be managed through Link. Commercial records that must legally remain are detached from the game profile, and deleting the account gives up the Tide Plus access attached to it. The game stored locally on that device stays playable while signed out.

You may also ask for access, correction, erasure, restriction, or portability, object to processing based on legitimate interests, or withdraw permission to quote feedback, by emailing the address above. For signed-out feedback, include the reference shown after sending. You may lodge a complaint with the French data-protection authority, the CNIL.

Cookies, advertising, and audience measurement

An account uses a strictly necessary session cookie. The game uses local storage for your game and settings. Stripe and Link use storage required for their Checkout and order-management surfaces when you choose to purchase.

The free version may display Google AdSense advertising. Google and the partners named in its consent interface may then use cookies or other identifiers, IP address, browser and device information, approximate location, and interactions with advertisements to select, deliver, and measure ads, prevent fraud and, when you consent, personalize advertising. If you decline, Google may still serve non-personalized or limited ads using page context and general information. Tide Plus accounts do not load advertising code while their access is active.

In the European Economic Area, the United Kingdom, and Switzerland, Google records your choices before using advertising purposes that require consent. You can decline as easily as consent and choose individual purposes and partners. While advertising code is active, you can reopen this interface from Settings → Your data. Google processes this information under its privacy policy and its own retention periods.

Technical error reports are not used for advertising or navigation tracking. They contain no session recording or click history and operate independently of your advertising choices.