Information kept on your device
The game uses browser or app storage to remember progress, boards, statistics, achievements, seasonal progress, preferences, accessibility and audio settings, daily-board status, random installation identifiers, and recovery state. This information remains on your device unless a feature described below sends specific information to Gentle Mahjong's services.
You can remove local information through your browser or device controls. Clearing site data may remove progress that has not been protected or synchronized.
Trophy protection
Trophy protection records a random installation identifier, cryptographic authentication hashes, achievement identifiers, unlock dates, and creation or update timestamps. It does not require your name or email address. Recovery codes should be kept private.
Optional accounts and cross-device sync
An optional account stores a random Player ID, a cryptographic hash of the private sign-in key, synchronized progress and achievements, selected preferences, session records, and account timestamps. Account creation does not require an email address. Private sign-in keys are not stored in readable form.
A secure, HTTP-only session cookie normally expires after 30 days. Account data remains until the account is deleted. You may delete synchronized account data in the game's Account & cross-device sync screen. Local progress on another device is not automatically deleted by a server-account deletion.
When credible abuse is reported, a Garden Keeper administrator may manually review the available information and ban an account. Bans are not automatic. A private moderation history contains the random Player ID, ban and unban actions, the administrator's reasons, and decision times; active sessions are revoked when an account is banned. Players may contact Garden Keeper Support to appeal or request deletion of the account. Deleting an account also deletes its moderation history.
Founder eligibility
Before the Gentle Mahjong 1.0 launch, private trophy protection may create a signed Founder eligibility record. It contains a random record identifier and issue date, not your name, email address, IP address, or gameplay history. The record is stored with private trophy-protection data and may travel with your encrypted recovery, personal export, and optional account synchronization so it can prove eligibility after a device change.
The record is used only to determine whether you can claim the permanent Founding Gardener pin during the announced claim period. It is not shown publicly, sold, or used for advertising.
Support and achievement recovery
If you voluntarily use account-based Garden Keeper Support, Cloudflare stores the ticket category, subject, plain-text conversation, status, timestamps, and your random Player ID. Authorized Garden Keepers can read this information to respond through the private in-game support inbox. Support does not ask for your email address. A report may separately describe a device, browser or accessibility setup and may include a privacy-safe board diagnostic.
You may optionally upload a PNG, JPEG, WebP, or PDF. Attachments are kept in private Cloudflare Workers KV storage and are available only through authenticated Support access. You may also preview and explicitly submit a limited diagnostic containing the app version, display mode, broad platform and language, viewport size, online state, and reduced-motion/effects state. Diagnostics never include account keys, cookies, recovery secrets, local-storage dumps, installation secrets, or unrelated progress history.
Resolved tickets may be reopened for 30 days and then close automatically. Attachments are normally deleted 90 days after closure; ticket messages and submitted diagnostics after 12 months; and ordinary detailed support events after 24 months. Legal-hold audit history remains throughout an active hold and for 24 months after its most recent release. Rejected or incomplete uploads are cleaned up sooner. A documented legal preservation duty may place a ticket on legal hold, suspending ordinary deletion until the hold is reviewed and formally released by an authorized Garden Keeper.
Deleting an account ends access to its Support tickets. Tickets and private attachments are deleted unless an active legal hold requires restricted preservation; held records are disconnected from the original Player ID through an irreversible pseudonym. Ban-appeal history is retained only when needed for an active ban-generation enforcement purpose. Legacy recovery requests remain a separate workflow and expire after 30 days.
Security information
Cloudflare hosts the game and processes ordinary network information—such as IP address, request headers, browser or device information, and security signals—to deliver the service and protect it from abuse. Gentle Mahjong creates cryptographic rate-limit and login-protection fingerprints from limited network and browser information. Expired rate-limit records are periodically removed. These controls are not used for advertising or cross-site tracking.
To show the private administrator approximate activity totals, a visible game sends a random presence identifier to Cloudflare about every two minutes. Its presence record is stored only as a cryptographic hash derived from that pseudonymous installation identifier and connection context; it is not connected to a name, email address, account ID, or gameplay history. The private Garden Keeper area reports only aggregate counts: installations active during the past five minutes and distinct installations active during the current Eastern Time calendar day. Presence records are retained for approximately 26 hours and then removed during a later activity refresh. Raw installation identifiers and individual activity histories are not shown to the administrator.
The support form uses Cloudflare Turnstile, which may process network, browser, device, and interaction signals to determine whether a request is legitimate.
Service providers
- Cloudflare provides website delivery, serverless functions, database storage, security, and Turnstile. Read Cloudflare's privacy policy.
- Resend relays voluntary support messages and attachments. Read Resend's privacy policy.
These providers may process information in countries other than your own under their applicable terms.
No advertising, sale, or profiling
Gentle Mahjong does not contain third-party advertising, sell personal information, use personal information for targeted advertising, or currently use third-party behavioral analytics.
Children's privacy
Gentle Mahjong is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Children should not submit support information without permission and assistance from a parent or guardian. If we learn that a child provided personal information without appropriate permission, we will take reasonable steps to delete it.
Your choices and requests
You may play without an account, choose whether to use optional sync or recovery features, download synchronized progress, delete a synchronized account, clear local data, and request access to, correction of, or deletion of support information. Depending on where you live, additional rights may apply.
For a privacy request, open Settings → About and support → Contact Garden Keeper Support and begin your message with “Privacy request.” Limited information may be needed to verify and complete your request. The private relay does not expose the operator's personal email address.
Security
Safeguards include HTTPS, hashed credentials and recovery secrets, secure session cookies, rate limiting, request limits, anti-bot verification, restricted administrative access, and signed recovery records. No storage or transmission method is completely secure.
Changes
This policy may change when the game's features, providers, or legal obligations change. The effective date will be updated, and material changes will be communicated in the game when appropriate.
Contact
Use Garden Keeper Support inside Gentle Mahjong. Gentle Mahjong is the game and developer name used for this service.