Privacy Policy

Who operates the game?

Mahjong Live is operated by Superlabs Pty Ltd. For privacy questions, access or correction requests, or complaints, contact hello@superlabs.com.au.

Information we collect

• Your account: email and identity information handled by our sign-in provider, Supabase Auth. If you choose Google sign-in, Google and Supabase handle the sign-in and the basic account information you authorise. We do not receive your Google password.
• Your profile: a player identifier, display name, optional country and timezone preferences. Your country is selected by you; the game does not infer it from your IP address.
• Play: table membership, game settings, moves, results, ratings, records and the state needed to run and recover a game. The game server checks moves and runs online play.
• Security and operation: session identifiers, sign-in events and technical request information needed to protect and run the service. Hosting providers may process IP addresses, browser details and operational logs.

Why we use it

We use this information to sign you in, show your chosen profile, connect players, run tables, calculate the correct ratings and records, recover interrupted games, prevent abuse and investigate faults or account requests. Test and Production use separate environments.

What other players can see

Other players may see your display name, selected country flag, table presence, rating, provisional status and relevant results. Public profile and leaderboard views show limited game information. Private-table records have tighter access controls.

Your email, timezone, sign-in credentials and unplayed concealed hand are not public table information. Discards, declared sets and any hand information revealed by the game’s end-of-hand rules are visible as part of play. A table code lets others join; share it only with intended players.

Cookies and storage on your device

The browser game uses a necessary sign-in cookie. It is protected so game scripts cannot read it. The game also keeps local practice progress and preferences in browser storage. Online account closure does not remove those local practice records; clear the site’s browser storage if you want to remove them.

The current game does not include advertising or analytics tools. Adding tracking would require a privacy review and updated information for players, including consent where required.

Service providers and overseas processing

We use Supabase for authentication and database services, Render for game hosting, and Google when you choose Google sign-in. Infrastructure providers process data to deliver those services. The present Test hosting and database are in Singapore; authentication, delivery networks, support and provider operations may involve other countries. Final Production regions and likely overseas processing locations still need to be confirmed.

See the providers’ information: Supabase, Render and Google. We may also disclose information where required by applicable law or to address a valid security incident.

Retention and account closure

Account closure requires a fresh sign-in. It revokes game sessions and removes or de-identifies profile and linked sign-in information in the game database. A game already in progress may finish under its normal rules. Closing an account does not erase competitive outcomes or let a player reset an unfavourable record.

Some game results, ratings, security checks and account-closure records remain linked to a player number rather than a display name. These protect other players’ results and help prevent abuse. The exact retention periods, provider backup expiry and operational log periods are not yet finalised and must be documented before launch.

Current Test limitation: automatic deletion from the sign-in provider is not enabled on the hosted Test site. Closing your game account does not currently guarantee removal of your Supabase sign-in record. The operator must arrange that deletion separately until the automatic process is enabled and checked. Do not use Test for sensitive personal information.

Your choices and requests

You can change available profile details and preferences from your avatar → Profile. You can choose not to display a country. You may request access, correction or account closure by emailing hello@superlabs.com.au. We may need to verify that the account is yours.

If you have a complaint, contact the operator first so it can be investigated. Applicable privacy laws may give you additional rights, including a right to complain to a regulator such as the Australian Information Commissioner where its jurisdiction applies.

Security

We use access controls, protected sessions and server-side game checks to limit unauthorised access. No online service can promise that every security incident or loss will be prevented.

Age requirement

Mahjong Live is for people aged 18 and over. It is not intended for anyone under 18. If you believe someone under 18 has provided personal information through the game, email hello@superlabs.com.au so we can review it.

Changes to this policy

The final policy will show its effective date. Material changes should be explained through the service before they take effect where required. This draft describes the current implementation; it is not a statement that every jurisdiction’s legal requirements have been met.