Privacy Policy

01 Who we are

Mahjong Switch is operated by Retabuc (“we”, “us”, “our”), the publisher of the App and the operator of app.retabuc.cc (the “Site”). For the purposes described in this policy, Retabuc is the data controller.

This policy applies to the Mahjong Switch iPhone application (the “App”) and the Site. It does not apply to third-party services that have their own privacy policies, such as Apple’s App Store or the privacy pages linked from this Site.

You can reach us about privacy at support@retabuc.cc. Put “Privacy request” in the subject line so it reaches the right place.

02 Information on your device

The App is designed to work without an account. Most of what it knows stays on your iPhone:

• Game progress: campaign stars and completions, unlocked levels, achievements, Daily and Endless streaks, and statistics.
• Preferences: sound, haptics, reduced motion, high contrast, hint visibility, and left-handed controls.
• Leaderboard credentials: an anonymous profile ID, a secret token, and your generated display name, stored in the iOS Keychain.

We do not receive your campaign progress, preferences, or Keychain contents. The App has no cloud save and no iCloud sync, so this information is not backed up by us. Deleting the App removes local progress. iOS may keep Keychain items after an uninstall, but this is not guaranteed.

03 The anonymous leaderboard

Leaderboards are optional. When you first open a ranking or submit a score, the App registers an anonymous profile with our leaderboard service, hosted on Cloudflare. The profile contains:

• a randomly generated player ID (a UUID);
• a secret access token — the App keeps the token in the Keychain, and our server stores only a one-way SHA-256 hash of it;
• an automatically generated display name in the form Player-XXXX;
• the time the profile was created.

Each score entry contains the board identifier, score, star rating, number of actions, completion time, a ruleset version, and the time the entry was updated. Where the App can produce a trustworthy record of the attempt, it also includes a compact replay: the sequence of switch activations and their timing. A replay contains no name, email address, device identifier, or other personal information, and it is used to keep rankings reproducible for future features and validation.

Your display name and scores are public to anyone who opens the same leaderboard. That is the point of a ranking. Do not put personal information in the game; display names cannot be customized.

We use this information to show rankings, keep your personal best, calculate your position, and reject impossible submissions. We do not collect your region or precise location for the leaderboard.

04 Analytics and attribution

The App uses AppsFlyer, a mobile measurement and analytics service, to understand how players progress and to measure where installs come from. AppsFlyer may receive:

• Usage events: screens viewed; levels started, completed, failed, quit, or restarted; scores, stars, action counts, elapsed time, mistakes, resets, hints, and achievements; settings changes; leaderboard views and submission outcomes; tutorial steps.
• Device and app information: device model, operating-system version, app version, language, and the Identifier for Vendors (IDFV).
• Network information: IP address, which AppsFlyer may use to infer an approximate country or region.
• Attribution data: install and campaign attribution, including Apple’s privacy-preserving SKAdNetwork data.

We use analytics to find difficulty spikes, understand which modes are used, diagnose crashes or progression problems, and measure the effectiveness of App Store listings. We do not use it for advertising, and we do not sell analytics data.

Advertising identifier (IDFA)

We do not use the Identifier for Advertisers (IDFA) to track you across other companies’ apps or websites. The current version of the App does not present an App Tracking Transparency prompt. If we ever begin using the IDFA for tracking, we will ask for your permission first and update this policy.

Your choices

There is currently no in-app analytics switch. You can email support@retabuc.cc with the subject “Analytics opt-out” to object. We will honor the request as required by law and explain what we can remove. Because analytics events are not keyed to your name or email address, we may not be able to locate historical events, but we will stop future processing where technically feasible.

At the system level, iOS lets you limit tracking under Settings → Privacy & Security → Tracking. You can also stop analytics data collection entirely by deleting the App.

AppsFlyer’s privacy policy is available at appsflyer.com/legal/services-privacy-policy.

05 Support correspondence

If you email us, we receive your email address, whatever name or signature you include, any device details you provide, and the content of your message and attachments. We use it to answer your question, troubleshoot the issue, and keep a record of support cases.

Messages sent to support@retabuc.cc are routed by Cloudflare Email Routing to a mailbox provided by Google (Gmail). Please do not send passwords, payment details, government identifiers, health information, or other sensitive information — there is nothing in the App that requires it.

06 What we do not collect

We do not ask for, and the App is not designed to collect:

• your real name, email address, phone number, or postal address (unless you choose to include them in an email to support);
• contacts, calendar, photos, camera, microphone, or health data;
• precise location, or a region for the leaderboard;
• passwords or payment information — the App has no accounts, ads, subscriptions, or in-app purchases;
• the advertising identifier (IDFA) for cross-app tracking;
• your activity on other apps or websites.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

07 Cookies and this website

This Site does not set cookies of its own, does not load analytics or advertising scripts, and does not fetch third-party fonts or libraries. The support form runs entirely in your browser: it prepares an email in your mail app and sends nothing to a server.

Like almost all websites, the Site is delivered through a content network. Cloudflare processes standard request information — such as your IP address, user agent, requested URL, and timestamp — to deliver pages, cache content, and protect the Site from abuse. Cloudflare may also set a security cookie (for example, __cf_bm) when bot protection is active. Those cookies are used for security, not advertising. Cloudflare’s privacy policy is at cloudflare.com/privacypolicy.

Because we do not track visitors across sites, there is no cross-site behavior to opt out of, and we do not respond differently to browser “Do Not Track” signals.

08 How we use information

• to provide the leaderboard, rankings, and personal-best features you choose to use;
• to keep rankings meaningful by validating submissions against level data;
• to understand how the game is played and improve levels, difficulty, and stability;
• to measure installs and the performance of App Store listings;
• to answer support requests and privacy requests;
• to protect the App and Site against abuse, fraud, and security threats;
• to comply with legal obligations and enforce our Terms of Use.

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. Leaderboard ranking is an automated ordering of scores, not a decision about your rights.

Data at a glance

09 Legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract: providing the leaderboard and support you request.
• Legitimate interests: operating and securing the App and Site, preventing abuse, understanding how the game is used, and improving it. We balance these interests against your rights and freedoms.
• Consent: where consent is required for analytics or another processing activity. You may withdraw consent at any time by contacting us.
• Legal obligation: keeping records or responding to lawful requests where the law requires it.

10 Sharing and processors

We share information only with service providers that help us run the App and Site, and only as needed for the purposes above:

• Cloudflare — hosting, the leaderboard database (D1), content delivery, security, and email routing. Data may be processed in the United States and other countries where Cloudflare operates.
• AppsFlyer — product analytics and install attribution.
• Google — the Gmail mailbox that receives support email.
• Apple — App Store distribution, receipts, and privacy-preserving SKAdNetwork attribution.

We may also disclose information if required by law, to respond to valid legal process, to protect our rights or the safety of users, or as part of a merger, acquisition, or sale of assets. If such a transfer happens, we will take steps to ensure the recipient honors this policy.

We do not sell personal information. We do not share it with data brokers or advertising networks for cross-context behavioral advertising.

11 International transfers

Our service providers operate globally, so information may be processed outside your country, including in the United States. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum, together with technical and organizational measures. Privacy laws in some countries may differ from those where you live.

12 How long we keep data

• On-device progress and settings: until you reset them, delete the App, or erase the device.
• Leaderboard profile and entries: until you ask us to delete them or the leaderboard service is discontinued. There is no automatic expiry.
• Support correspondence: up to 24 months after the last exchange, unless a longer period is needed for a legal claim or obligation.
• Analytics: according to the retention settings configured with AppsFlyer, generally no longer than 24 months.
• Website and infrastructure logs: for the short period configured by Cloudflare for delivery, security, and abuse prevention.

When information is no longer needed, we delete it or aggregate it so that it no longer identifies anyone.

13 Your privacy rights

Depending on where you live, you may have the right to:

• know what personal information we hold and receive a copy of it;
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing, including direct marketing (we do none) and processing based on legitimate interests;
• receive your information in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with your local data protection authority.

California residents also have the right to know, delete, correct, and obtain a copy of personal information; to opt out of the sale or sharing of personal information (we do neither); to limit the use of sensitive personal information (we do not collect it for those purposes); and to be free from discrimination for exercising these rights. You may use an authorized agent; we may ask for proof of authorization.

How to make a request

Email support@retabuc.cc with the subject “Privacy request”. For leaderboard data, include your display name (for example, Player-C7AA), a board where you appear, and the approximate date. Because profiles are anonymous, that is usually the only way we can find them; we may ask for additional details to confirm we are deleting the right profile.

We will respond within the time required by law — generally 30 days under the GDPR or 45 days under California law, with an extension where permitted. We do not charge a fee unless a request is manifestly unfounded or excessive.

If you are in the EEA, the UK, or Switzerland, you may also complain to your local supervisory authority. In California, you may contact the California Attorney General. We would appreciate the chance to resolve your concern first.

14 Children

Mahjong Switch is not directed to children under 13 (or under 16 where a higher age applies in the EEA/UK), and we do not knowingly collect personal information from them. The App has no account, chat, user-generated content, advertising, or purchases.

If you believe a child has submitted information through the leaderboard or by email, contact us and we will delete it. Parents and guardians can make a request on a child’s behalf using the process in the previous section.

15 Security

We protect information with technical and organizational measures appropriate to its sensitivity: traffic to the leaderboard and Site uses HTTPS; access tokens are stored as SHA-256 hashes rather than plain text; database and infrastructure access is limited to those who need it; and we do not store passwords because the App has no accounts.

No method of transmission or storage is completely secure. Leaderboard display names and scores are public by design, so please do not expect privacy for the information you choose to rank with. If you discover a security issue, please report it to support@retabuc.cc rather than disclosing it publicly.

16 Changes to this policy

We may update this policy to reflect changes in the App, our service providers, or the law. When we do, we will change the “Last updated” date at the top. If a change is material, we will provide a clearer notice on this Site or in the App before it takes effect.

The version published on this page is the current version. Continued use of the App or Site after the effective date means the updated policy applies.

17 Contact

Questions, privacy requests, and deletion requests can be sent to:

We may ask for information needed to verify and fulfill a request. We will not use a request as a reason to collect more information than necessary.