Privacy Policy
Plain-English version. Last updated 29 April 2026.
Who we are
sgmahjong.com is operated by Digital Perpetual ("Digital Perpetual", "we", "us"), a Singapore-based digital studio. If you have privacy questions, send a message via our contact form (pick subject "Privacy or data request") or visit digitalperpetual.com.
What we collect
- If you register an account: username, display name, email address, hashed password (we never see or store the plain-text password), and the time you registered.
- If you play as a guest: a chosen display name and a randomly-generated guest ID. No email, no password.
- While you play: the hands you play, your chip balance, who you played with, and game outcomes — used for the leaderboard, your statistics, and game state.
- Voice chat: when you turn on voice at a table, audio streams peer-to-peer between players. Audio never touches our servers — we only relay the connection-establishment messages (SDP/ICE) so your browsers can find each other. We do not record voice.
- Standard server logs: IP address, browser/device type, the URLs you visit, kept for at most 30 days, used to debug issues and detect abuse.
- Cookies: a single session cookie (
sgm_session) to keep you logged in. No third-party tracking cookies.
How we use it
- To run the game — match you with opponents, persist your hand history, settle chip balances.
- To verify your email address (one-time message via SendGrid) and to send the rare service notice.
- To prevent abuse — rate-limiting, bot detection, banning bad actors.
- We do not sell or share your data with advertisers, except as needed to render Google AdSense ads on the public content pages (rules, scoring, etc.). Ads do not appear inside the game itself.
Where it lives
Data is stored on a virtual server operated by Digital Perpetual in Singapore. Backups are encrypted and stored in DigitalOcean Spaces (Singapore region).
Real money
sgmahjong.com is virtual chips only. We do not facilitate, broker, or settle real-money mahjong play. Your chips have no monetary value and cannot be cashed out.
Your rights
- Access: ask us for a copy of everything we have about you. We'll send it within 30 days.
- Deletion: ask us to delete your account and we'll wipe it within 7 days. Game history with other players is anonymised (your name replaced with "Player").
- Correction: log in and update your display name yourself, or write to us if other details are wrong.
Children
You must be at least 13 years old to register an account. We do not knowingly collect personal data from anyone under 13.
Changes
If we change this policy in a way that meaningfully affects your data, we'll email registered users before the change takes effect.