Privacy Policy

MahjongFinder is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using MahjongFinder, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our services.

Information You Provide

• Account creation: email address, display name
• Profile: location, game preferences, bio
• Place submissions and reviews
• Event creation and RSVPs
• Contact and feedback forms

Information Collected Automatically

• Device info: browser type, operating system
• IP address and approximate location
• Pages visited and time spent
• Referring website or search terms
• Cookies and similar tracking technologies

Information from Third Parties

If you sign in using Google OAuth, we receive:

• Your Google account email address
• Your Google profile name and photo (if available)

We do not access your Google contacts, calendar, or other Google services.

We use the information we collect to:

• Provide and maintain our services
• Create and manage your account
• Display mahjong places and events near you
• Enable you to connect with other players
• Send service-related notifications
• Respond to inquiries and support requests
• Improve our website and services
• Detect and prevent fraud or abuse
• Comply with legal obligations

Public Information

Display name, profile photo, reviews, and event participation are publicly visible. Control some of this through privacy settings.

Service Providers

We share with third parties who help operate our website:

• Hosting: Supabase, Cloudflare
• Email: Mailgun
• Analytics: Google Analytics, Microsoft Clarity
• Payments: Stripe — processes tournament entry fees and place subscription billing. We share your name, email, and payment token with Stripe; we do not store full card numbers. Stripe's privacy policy governs how Stripe handles your payment data.

Moderation & Safety Data

MahjongFinder maintains two categories of safety-related records:

• Content reports: When you report a review, photo, or user, we record your user ID, the reported entity, the reason, and the timestamp. This data is visible only to MahjongFinder administrators and is used solely for moderation decisions. We do not share report details with the reported party.
• Suspension history: If your account is suspended, we record the reason, duration, and acting administrator. This record is retained for enforcement and dispute resolution purposes and is not publicly visible. Suspension records may be reviewed in connection with legal proceedings or safety investigations.

Legal Requirements

We may disclose information if required by law or in response to:

• Valid legal process (subpoenas, court orders)
• Government requests
• Protection of our rights, privacy, safety, or property

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze site traffic and usage
• Provide targeted advertising (with your consent)

You can control cookies through your browser settings or our cookie consent tool. Disabling cookies may affect some features. See our Cookie Policy for more details.

Security Measures

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication with email verification and OAuth
• Regular security assessments
• Access controls and employee training

No method of transmission is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain information as long as your account is active or as needed to provide services. We may retain certain information longer for:

• Resolving disputes
• Enforcing agreements
• Complying with legal obligations
• Moderation records (content reports and suspension history) are retained for the lifetime of your account and for 2 years after account deletion to support safety investigations and dispute resolution.

Request account and data deletion at [email protected].

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Object to or restrict certain processing
• Data portability (receive your data in a structured format)
• Withdraw consent where processing is based on consent

To exercise these rights, contact [email protected].

California (CCPA/CPRA)

California residents have additional rights:

• Know what personal information is collected, used, shared, or sold
• Delete personal information
• Opt out of sale or sharing of personal information
• Non-discrimination for exercising privacy rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

We do not sell your personal information.

Virginia, Colorado, Connecticut, Utah

• Access, correct, and delete your personal data
• Opt out of targeted advertising
• Opt out of the sale of personal data
• Appeal if your request is denied

Children's Privacy

Our services are not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect information from children. If we learn we have collected such information, we will delete it promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your residence, including the United States. By using our services, you consent to this transfer.

For users in the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses and other approved mechanisms for international data transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. For significant changes, we may also send email notification.

Continued use after changes constitutes acceptance of the updated policy.

Governing Law

This Privacy Policy is governed by the laws of the State of Wyoming, United States, without regard to conflict of law provisions.