Le Mahjong for iPhone

Privacy policy

Effective November 5, 2026 · Operated by Colin Wong under the Planet Wong name

Local play stays on your phone. Shared play uses our service to keep your table in sync. Here’s what that means for your information.

This policy covers current Le Mahjong services, including player profiles and voluntary feedback. Features depend on your app version. Older builds may need an update to access Shared play; Local play and practice remain available without an account.

Information on your phone

Le Mahjong stores settings, Local session names and results, practice progress, and best scores on your iPhone. Rules, artwork, and pronunciation audio are bundled with the app. Local play, practice, and reference features do not require an account or upload their records to the shared-session service.

The app also stores cached Shared game information, feedback drafts, and sign-in credentials needed for features you use. Sign-in credentials are stored in the iOS Keychain. The server stores a hash of the credential, not the original secret.

Player profiles and sign-in

Shared play on profile-enabled versions requires your first name, last name, email address, and a profile photo. We store this information on our Railway-hosted service. Your email identifies your account and receives one-time sign-in and email-change codes through Resend. We do not use passwords, perform facial recognition, or verify your legal identity.

One phone can be signed in to an account at a time. Signing in on another phone revokes the previous phone’s access. Verification codes expire after ten minutes and have a limited number of attempts. The service stores codes as keyed hashes and removes expired challenges and temporary abuse-prevention counters through scheduled cleanup.

Photos and visibility

Your full name and profile photo are visible to tablemates. Your email address is not shown to other players or included in table snapshots. Selected photos are resized and re-encoded to remove embedded metadata such as location. Photos are stored privately; retrieving them requires an authenticated, authorized request.

The photo picker gives the app access to the image you select. Camera permission is requested if you choose to take a photo.

Shared games

To synchronize games and restore Shared history on another phone, the service stores table membership, player identifiers, seats, rules, recorded hands, scores, balances, replacement requests, and timestamps. The host controls scoring. Only authorized table members can access private game history; knowing a table code does not grant host authority.

Replaced players retain read-only history on profile-enabled versions. A player who leaves the lobby does not retain access to that game’s future history. Ending a game preserves its recorded results; an expired invitation code does not delete the game ledger.

Older versions used randomly generated device credentials and player names without verified profiles. Where the original phone’s credential proves ownership, that membership can be linked to a profile. We do not infer identity from matching names. Some older records cannot be reliably linked to a verified profile.

Feedback and support

If you submit feedback in the app, we receive the category, message, any screenshot you attach, and your app/build and iOS versions. For signed-in players, the feedback includes the account name and email shown before sending. Otherwise, a name and reply email are optional.

Feedback uses an app-generated device credential for retry handling and abuse prevention; only its hash is retained by the backend. The feedback submission does not automatically include game history, scores, device model, or logs. Screenshots are resized and re-encoded to remove embedded photo metadata.

Feedback is stored on our service and sent to the support inbox through Resend. Older submissions may remain on the previous Planet Wong service. Feedback drafts and pending submissions remain on your phone until successfully sent or changed. If you contact us by email, we receive the message and contact information you provide and use them to respond. Avoid including private information in attachments.

Your choices and deletion

In Profile, you can edit your name and photo, verify a new email address, sign out, or delete your account. Deletion removes your profile, email, stored photo, and sign-in credential from the active service. Associated scores remain for other participants and show “Deleted player.” Deleting the account of a seated player closes that active table. Older ambiguous names associated with the deleted profile are conservatively redacted. Non-identifying migration records prevent old device credentials from being reassigned.

Signing out clears account-specific Shared caches and pending commands on your phone. Deleting the app alone does not delete server records. Other players may have exported game results, and those copies are outside our control. Service-provider delivery records and backups may be retained under the providers’ retention practices.

Shared game records remain on the service after a game ends. Feedback and support messages may be retained to investigate issues and handle follow-up. To request deletion of feedback, older Shared records, or information you cannot manage in the app, email colin@planetwong.com. We may ask for enough information to verify the request. Do not send passwords or sign-in codes.

Service providers and technical information

Railway hosts the services and databases used for Shared play and feedback. Resend delivers sign-in codes and feedback emails. Network requests use technical information such as IP addresses to deliver requests and prevent abuse.

This website is hosted on Railway. It does not set analytics cookies, include advertising trackers, or use third-party analytics scripts. Hosting infrastructure may process request information, such as IP addresses, for delivery, security, and operational logs.

Advertising and analytics

Le Mahjong has no advertisements, advertising identifiers, or third-party analytics SDKs. We do not use profile photos, email addresses, or game records for advertising, cross-app tracking, or sale to data brokers.

Apple and TestFlight

If you use TestFlight, Apple may collect installation information, diagnostics, and feedback under Apple’s privacy policy. Information Apple makes available to the developer may be used to investigate problems and improve the app.

Children

If you believe a child has provided personal information that should be removed, contact us so we can investigate and address it.

Changes to this policy

Updates will be published here with a revised effective date.

Contact

For privacy questions or requests, contact Colin Wong at colin@planetwong.com.