MyOpen · CodeTo2050 Legal

Privacy Policy for MahJong Now

Last updated: 2026-09-20
Version: 1.1.0

Summary

This summary is for orientation only; the sections below are the operative terms.

1. Data Controller & Contact

Controller: Robert Yang (operating under the brand "MyOpen Studio")
Email: support@myopen.app
Website: https://myopen.app

This Privacy Policy applies to MahJong Now ("the Service" or "the App"), part of the MyOpen app series created under the CodeTo2050 project.

2. Data We Collect

The App has no sign-up and no login. Single-player games, online play, tutorials, and statistics all work without an account, so there is no profile for us to build.

2.1 Data Stored on Your Device

Your game records, statistics, settings, theme, and nickname are stored in a database on your device. We do not upload them. They are removed when you delete the App.

Games played against the built-in AI are entirely local. They involve no network connection of any kind beyond advertising (section 2.4).

2.2 Online Play (Relay Server)

When you create or join an online room, the App connects to a relay server that we operate. The following is transmitted:

The relay forwards these between the players in a room and holds them in memory only. It has no database and no attached storage. A room's data ceases to exist when the room ends, and all rooms cease to exist when the server restarts or shuts down — which it does automatically when nobody is playing.

Rooms are also released without anyone having to close them. A room that everybody has left is swept from memory within a few minutes, and a connection that goes quiet is closed automatically shortly after. An abandoned room therefore cannot linger in memory indefinitely.

The relay does not interpret the contents of a game. It forwards messages between players without understanding them.

2.3 IP Address

As with any internet connection, your IP address is visible to the relay server and to our hosting provider while you are connected. We do not store it or use it to build a profile. Our hosting provider may process it for network operation and abuse prevention under its own policy (section 5.3).

2.4 Advertising

The App displays ads supplied by Google AdMob. Google acts as an independent controller for the data it collects and may access your device's advertising identifier and related device and usage data in order to serve and measure ads.

Google's handling of this data is described at policies.google.com/technologies/partner-sites.

2.5 Analytics and Crash Reporting

We use none. The App contains no analytics SDK and no crash-reporting SDK.

2.6 Permission-Based Data

Camera. The App asks for camera access for one purpose only: scanning a room QR code so that you can join a friend's game. The camera image is processed on your device to read the code and is never uploaded, recorded, or stored. Only the room code is taken from it. Scanning is a shortcut, never a requirement — you may decline the permission, and entering a room code by hand always remains available.

The App does not request access to your photos, microphone, contacts, location, or notifications. If a future version introduces a feature requiring a permission, you will be asked at the time and this Policy will be updated.

3. Legal Basis for Processing (GDPR)

4. How We Use Your Data

We do not sell your data. We do not share it with data brokers. We do not use it for profiling, and we do not combine it with data from other sources.

5. Third-Party Services & Data Sharing

5.1 Apple App Store & Google Play Store (Independent Controllers)

Used for app distribution. They may process device and installation data independently according to their own privacy policies.

5.2 Google AdMob (Independent Controller)

Advertising, as described in section 2.4.

5.3 Fly.io (Processor — Hosting)

Our relay server runs on Fly.io infrastructure in the Tokyo region. Fly.io provides the machines and network on which the relay runs and may process connection metadata, including IP addresses, for network operation.

5.4 No Data Selling

We do not sell your data, and we do not share it with third parties for their own advertising or marketing.

6. Data Retention & Deletion

7. International Transfers

The relay server is located in Japan. If you play online from outside Japan, the data in section 2.2 is transmitted there for the duration of your session. Given that nothing is stored, the transfer is limited to the live routing of your game.

8. Children's Privacy

The Service is not directed to children under 13 (or the equivalent age under your local law). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will delete it.

Because the App shows advertising, we request non-personalized ads for all users, which limits the data used to serve them.

9. Security

Connections between the App and the relay server are encrypted in transit. On-device data is protected by your device's own operating-system protections. Because the relay stores nothing, there is no stored database of players to be breached.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Your Rights (GDPR / CCPA)

You may request access to, correction of, deletion of, or portability of your personal data, object to processing, or lodge a complaint with your supervisory authority.

In practice, we hold very little that could be returned to you: your game data is on your device and not accessible to us, and relay data does not outlive your session. We will respond to any request and explain precisely what does and does not exist.

There is no account to delete. To remove everything the App holds about you, delete the App.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes may also be shown in‑app when appropriate.

12. Contact

If you have questions about this Privacy Policy or your rights, contact: support@myopen.app