Mahjong Space
Mahjong Space

Privacy

Privacy Policy for Mahjong Space

Last updated: October 30, 2026

Boxtree, Inc. (“we”, “us”) makes Mahjong Space for the web, Meta Quest, iPhone, iPad and Apple Vision Pro. This policy explains what data Mahjong Space collects, exactly how it is used, and how you can delete it. It applies to every version of the game and to this website.

In short: we collect only the minimum the game needs to work, mostly to run optional multiplayer games with friends and optional in-app purchases. We never sell your data, never share it with third parties for advertising, and never use it for any purpose other than running the game. You can delete your account and all of its data yourself, at any time, from your profile in the game.

Playing without an account

You can play solo, take the tutorial and browse the glossary without signing in. Your settings, table companion, avatar choice and progress are saved only on your device and are never sent to us.

Your account (for playing with friends)

An account is only needed to play multiplayer games with friends. When you create one, we store:

  • How you sign in: your email address if you sign in with an emailed code; the email address Apple shares with us if you use Sign in with Apple (which may be a private relay address); or your Meta account on a Meta Quest headset, as described below.
  • Your profile: the nickname and avatar emoji you choose. They are shown to the other players in your game rooms, and you can change them at any time from your profile.
  • An account ID that we generate, which connects your account to your game rooms and purchases.

We use this information only to sign you in, show your nickname and emoji to the friends you play with, and keep your purchases attached to your account. We never use your email address for marketing.

Data from your Meta account (Meta Quest app)

The Meta Quest app uses three Meta Horizon platform features, each only for the purpose described here:

  • User ID (USER_ID). Meta gives Mahjong Space an ID for your Meta account that is unique to this app. When you choose Continue with Meta, sign in on your headset, or unlock a purchase, the app sends this ID to our server, which asks Meta to confirm that your Meta account owns Mahjong Space (and, for purchases, the add-on). We store only a one-way, keyed hash of the ID so we can recognize your account the next time you sign in; the ID itself is never stored, never shown to other players, and never used for anything else. On launch, the app also checks on the headset whether a Meta account is signed in, so it can offer Continue with Meta. That check stays on the headset.
  • User profile (USER_PROFILE). When Continue with Meta creates a new Mahjong Space account, we ask Meta once for your display name (or alias) to use as your starting nickname at the table. It is saved only as your nickname, which you can change at any time, and we keep nothing else from your Meta profile.
  • In-app purchases (IAP). The app shows the price of the optional Patron add-on and lets you buy it through the Meta Horizon Store, which handles the payment; we never see your payment details. To unlock patron items, the app and our server check with Meta that your Meta account owns the add-on, and we record only that your Mahjong Space account is a patron.

We do not access your Meta friends, photos, or any other Meta account data.

Multiplayer game rooms

When you create or join a room with friends, we store the room’s name and rules, who is sitting in each seat (account ID, nickname, avatar emoji and table companion), and the game in progress (tiles, moves and scores), so that every player’s device stays in sync. Everyone in the room can see each player’s nickname, emoji, companion and moves. Rooms are deleted automatically after an hour without play.

Voice chat and avatars (optional and live only)

  • Voice chat is off until you turn on your microphone in a room, and your device asks for permission first. Your voice is sent live to the other players in your room, and is never recorded or stored.
  • Avatars: in a headset, the avatar you choose and the movement of your head and hands (including finger positions when hand tracking is on) are sent live to the other headset players in your room so your avatar moves with you. This movement data is never recorded or stored.
  • Voice and avatar movement travel directly between players’ devices, or through a relay server only when a network requires it. Setting up these connections shares your device’s network (IP) address with the other players’ devices and with the services that connect them.

Your surroundings and hands (headsets)

In mixed reality, Mahjong Space can use your headset’s understanding of your room to place the game on a real table, and hand tracking to let you play with your hands. This data is processed on your headset and is never sent to us. The only exception is the live avatar movement described above, which goes only to the players in your room.

Optional purchases

Patronage is an optional, one-time purchase that unlocks decorative tile sets and extra tabletop animal mascots. It is sold through the Meta Horizon Store in the Meta Quest app, the App Store on Apple devices (where RevenueCat helps us confirm purchases), and Stripe on this website. These services handle payment, and we never receive your card or bank details. We receive only confirmation of the purchase (and, for purchases on this website, the email address used at checkout so the purchase can be matched to your account), and we record that your account is a patron.

Support requests

If you email us or use our contact form (provided by Typeform), we use what you send only to help you, and we keep it in confidence.

No ads, no tracking, no selling

  • We never sell or rent your data to anyone.
  • We never share your data with third parties for advertising or marketing. Mahjong Space shows no ads and contains no advertising or tracking code.
  • We never use your data for any purpose other than running the core game and its multiplayer features, and we never build profiles about you.
  • Your data is handled only by the service providers that run the game for us, and only to provide it: Supabase (accounts, our database and live multiplayer), Meta, Apple, RevenueCat and Stripe (sign-in and purchases), Typeform (our contact form), and our website host, which keeps short-lived technical logs such as IP addresses to keep the service running and secure. We may also disclose data if the law requires it.

How long we keep data

We keep your account and profile until you delete your account. Game rooms are deleted automatically after an hour without play. Voice and avatar movement are never stored. When you delete your account, we do not retain any of your user data.

Delete your account and data

Every user, wherever you live, can delete their account and data at any time, free of charge. You can do it yourself from your profile in the game:

  • Meta Quest: open Play with friends, choose Edit profile, then Delete account. Type DELETE to confirm, then choose Delete permanently.
  • Web: sign in at www.mahjong.space/play, choose Edit profile, then Delete account. Type DELETE to confirm.
  • iPhone, iPad and Apple Vision Pro: choose Sign Out or Delete Account, then Delete Account, and confirm.

Deleting your account immediately and permanently removes it from our servers, along with everything connected to it: your sign-in details (including the link to your Meta account), nickname, avatar emoji, patron status and multiplayer game data. We do not retain any of your user data after your account is deleted. Purchases you made through the Meta Horizon Store or the App Store remain with your Meta or Apple account, under their own policies. Settings saved only on your device are removed when you uninstall the app or clear this website’s data in your browser.

You can also ask us to delete your data, or to send you a copy of it, at any time: email support@boxtree.gg or use the contact form at www.mahjong.space/support. Tell us your nickname and how you sign in. We may ask you to confirm that the account is yours before deleting it, and we will complete your request within 30 days and let you know when it is done.

Children

Mahjong Space is a game for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit, access to our database is restricted, and Meta user IDs are stored only as keyed hashes.

Changes to this policy

If we change this policy, we will update the date at the top of this page, and we will tell you in the game before any change in how we use your data takes effect.

Contact us

Boxtree, Inc. is responsible for your data in Mahjong Space. You are welcome to contact us at any time for help: email support@boxtree.gg or use the contact form at www.mahjong.space/support.