Privacy Policy.

Prepared 27 October 2026 for Dcode Nexus Mahjong, operated by Danial Ronald Richard Collyer (public name Dan Collyer). Contact: [email protected]. This implementation is awaiting deployment; enabled services and retention settings must be checked against this notice before accepting public accounts.

Accounts and public profiles

Google sign-in supplies a verified email, account identifier and basic profile information. Your account email and Google identity are private. Your chosen display name, uploaded avatar and short description are public on completed player profiles. Leaderboards show your chosen name, avatar and validated results. A face photograph is not required.

Purpose and storage

We use account and game records to operate profiles, validate scores, prevent abuse and provide support. Cloudflare D1 stores application records and Cloudflare R2 stores normalised avatars. Images are reduced and metadata removed. Services may process information outside Australia.

Optional marketing and advertising

Marketing consent is separate from account creation and support. You can withdraw in your profile or by contacting us; unsubscribe suppression must be honoured. Advertising is disabled until approved and configured. When enabled, Google advertising and any optional analytics require accurate disclosures and consent where applicable. We do not publish email addresses or send biographies to advertising systems.

Security, cookies and local storage

Essential cookies support sign-in and session security. Local storage remembers your practice board and display preferences. Administrative changes are audited. Security and delivery services may process request metadata to prevent abuse. No system can guarantee absolute security.

Access, correction and deletion

Edit your profile or delete your account from the profile page. Deletion removes the active account, sessions, scores and stored avatar. Founding-owner accounts need access arrangements resolved first. You can request deletion externally through the contact page. Operational backup expiry and retention periods must be finalised and disclosed before launch. Do not submit sensitive information in public descriptions or contact messages.