★ Mahjong Pa More
Privacy Policy for Mahjong Pa More
Effective date: July 21, 2026
This Privacy Policy explains how Henyo Games ("we", "us", or "our") handles information in connection with the mobile game Mahjong Pa More (the "Game", the "App"). Mahjong Pa More is a Filipino-style mahjong game with an optional online multiplayer mode and an optional player account for saving your progress to the cloud. You can play the Game as a Guest without signing in. If you choose to create an account, you can sign in with Sign in with Apple, Google, or Facebook so that your progress is backed up and can be restored on another device. We designed the Game to collect as little personal information as possible.
By downloading or using the Game, you agree to the practices described in this Policy. If you do not agree, please do not use the Game.
Summary
- Playing is optional-account. You can play as a Guest with no sign-in. Signing in is optional and is only used to back up and restore your game progress.
- Sign-in via Firebase. If you sign in, we use Google's Firebase Authentication and Sign in with Apple / Google / Facebook. From your chosen provider we receive a stable user identifier and, depending on the provider and your choices, your email address and display name.
- Cloud save. If you are signed in, your game progress (rank, in-game currency, cosmetics, stats, settings, and similar data) is stored in Google Cloud Firestore under your account so it can sync across your devices. Guests' data stays only on the device until they sign in.
- Anonymous online play. If you play online multiplayer, we send a randomly generated anonymous player ID plus your chosen display name, avatar, color, and rank tier to our game server so other players can be matched with you and see you at the table.
- Advertising. The Game shows ads through Google AdMob. Google may collect a device advertising identifier and related device information to serve and measure ads. On iOS, we ask for your permission (App Tracking Transparency) before any tracking that would personalize ads.
- Account & data deletion. You can delete your account and cloud-saved data at any time from within the Game (Profile › Account › Delete Account), or by emailing us. See "Deleting Your Account and Data" below.
- Optional subscription. The Game is free to play with an optional auto-renewing subscription ("Ad-Free Monthly") that removes ads. Purchases are handled by Apple or Google through their in-app purchase systems; we — via our provider RevenueCat — receive the purchase/transaction status and a pseudonymous app-user identifier so we can unlock and restore your subscription. We never receive your card number. There is no gambling, betting, or cash prizes; in-game currency has no real-world value and cannot be bought with real money.
Information We Collect
1. Account information (when you choose to sign in)
Signing in is optional; you can play as a Guest without an account. If you sign in, we use Firebase Authentication (a Google service) together with your chosen identity provider. Depending on the provider and the permissions you grant, we receive and store:
- A provider user identifier and a Firebase user ID (UID) that identify your account;
- Your email address, where the provider supplies it (with Sign in with Apple you may choose Apple's Hide My Email relay address instead of your real email);
- Your display name and, where provided, profile photo/avatar from the provider;
- Authentication tokens needed to keep you signed in.
What each provider shares with us:
- Sign in with Apple — a stable Apple user identifier, and the name and email you approve on the consent screen. If you select Hide My Email, Apple gives us a private relay address instead of your real one.
- Google — your Google account's user ID, email address, and basic profile (name and profile photo).
- Facebook — your Facebook app-scoped user ID and the basic profile fields you approve (typically name and, if granted, email).
We use this account information solely to authenticate you, to create and secure your account, and to attach your cloud-saved progress to that account. We do not use it for advertising or sell it. Guests are given only a random on-device identifier; if you later link your Guest progress to a provider account, that progress is associated with your new account.
2. Cloud-saved game progress (when you are signed in)
When you are signed in, we store a copy of your game progress in Google Cloud Firestore, associated with your Firebase user ID, so it can be backed up and synced across your devices. This cloud-saved data mirrors the on-device data described below and includes your rank points and rank/tier, in-game currency (barya and ginto), cosmetics owned and equipped, statistics (games played, wins, best hand), settings, daily-reward and season-pass progress, and your display name. When you sign in on a device, your local and cloud data are merged. If you play only as a Guest, this data is not uploaded and stays on your device.
3. Information stored only on your device
The following information is created and saved locally on your device (using the operating system's local storage / shared preferences) and, if you are not signed in, is not transmitted to us; if you are signed in, a copy is also saved to your account in the cloud as described above:
- Your display name (a default name is used until you change it);
- Game progress and profile data, including rank points, rank/tier, in-game currency (barya and ginto), games played, wins, and your best hand;
- Cosmetic items you own and have equipped (tile sets and table felts);
- Daily streak and daily-reward status, and battle-pass tier progress;
- Your settings and preferences, including language, sound on/off, reduced-motion, game variant, and whether the "remove ads" option is enabled;
- A randomly generated anonymous player ID (stored as
mpm.pid) used to identify your device for online reconnection.
Because this data lives on your device, it is removed when you uninstall the Game or clear the app's data. If you are signed in, deleting your account also removes the cloud copy (see "Deleting Your Account and Data").
4. Information sent when you play online multiplayer
Online multiplayer is optional. If you choose to play online, the Game connects to our real-time game server over a secure WebSocket connection and sends only the following, so that a match can be set up and other players can see you at the table:
- Your anonymous, randomly generated player ID (
mpm.pid) — not linked to your real identity;
- Your chosen display name;
- Your selected avatar and avatar color;
- Your rank tier;
- The gameplay actions you take during a match (for example, tiles drawn, discarded, or melded), which are relayed to the other players at your table.
Our game server keeps this information only in memory for the duration of your session and active matches. We do not operate a database that stores your multiplayer profile or match history on the server, and the online mode is unranked and casual. We do not collect your contacts, photos, or precise location.
5. Advertising information
The Game is free and is supported by advertising delivered through Google AdMob. We show banner, interstitial (full-screen), and rewarded (opt-in "watch to earn") ads. To serve, cap, and measure these ads, Google and its ad partners may collect and process:
- A mobile advertising identifier (Android Advertising ID or iOS Identifier for Advertisers/IDFA);
- Device and technical information such as device model, operating system version, language, coarse (country/region-level) location inferred from IP address, and IP address;
- Ad interaction data, such as which ads were shown and whether they were viewed or clicked.
This ad-related data is collected by Google as part of its advertising services and is governed by Google's own policies. See How Google uses information from sites or apps that use its services and the Google Privacy Policy. Your sign-in identity is not shared with our ad partner, and we do not use your advertising identifier to build a profile of you.
If you enable the in-game "remove ads" option, banner and interstitial ads are suppressed; optional rewarded ads may still be offered.
Information we do NOT collect
Even when you sign in, the Game does not collect or use:
- Precise/GPS location;
- Your contacts, photos, microphone, or camera;
- Your provider password or login credentials — authentication is handled by Apple, Google, or Facebook and Firebase; we never see your password;
- Your full payment or credit-card details — in-app purchases are processed entirely by Apple or Google, and we never receive your card number;
- Third-party analytics or advertising profiles built from your account (your sign-in identity is not shared with our ad partner).
How We Use Information
We use the limited information described above to:
- Authenticate you, create and secure your account, and back up and restore your game progress across your devices (when you sign in);
- Save your progress, cosmetics, and settings on your device;
- Connect you to online multiplayer matches and let other players see your display name, avatar, color, and tier;
- Maintain reconnection to an in-progress online match using your anonymous player ID;
- Display advertising to keep the Game free (through Google AdMob);
- Process, unlock, and restore your optional Ad-Free subscription (through RevenueCat and the Apple/Google in-app purchase systems);
- Keep the Game working, prevent abuse, and maintain the security and integrity of the account and multiplayer services.
How Information Is Shared
We do not sell your personal information. Information is shared only as follows:
- With other players: when you play online, your display name, avatar, color, and tier are visible to the other players in your match.
- With Google (Firebase): account authentication and cloud-save data are processed and stored by Google Firebase Authentication and Cloud Firestore as our data processor, governed by Google's Firebase privacy and security terms.
- With your identity provider (Apple / Google / Facebook): when you sign in, that provider processes the sign-in and shares the profile information described above; the provider's own privacy policy applies to their side of the sign-in.
- With Google (AdMob): to deliver and measure ads, as described above and governed by Google's policies.
- With RevenueCat: to process, validate, and restore the optional Ad-Free subscription, we share purchase/transaction status and a pseudonymous app-user identifier with RevenueCat as our data processor.
- For legal reasons: if required to comply with a valid legal obligation, or to protect the rights, safety, or property of our players or us.
App Tracking Transparency (iOS)
On Apple devices running iOS 14.5 or later, the Game presents Apple's App Tracking Transparency prompt before any tracking that would be used to personalize ads. If you choose Ask App Not to Track, ads will still be shown but will be non-personalized. You can change this choice at any time in iOS Settings › Privacy & Security › Tracking.
Deleting Your Account and Data
If you created an account, you can delete it and its cloud-saved data at any time:
- In the Game: open Profile › Account › Delete Account and confirm. This permanently deletes your Firebase authentication record and your cloud-saved progress in Cloud Firestore. This action cannot be undone.
- By request: email us at mahjong@pamore.app from the email associated with your account, or with your in-game display name, and we will delete your account and associated cloud data. You can also submit a deletion request at our data-deletion page: https://mahjong.pamore.app/delete-account.html.
Deleting your account removes your authentication record and cloud-saved data from our systems. Data cached locally on your device is removed when you sign out, delete your account, uninstall the Game, or clear its data. Standard backups may retain residual copies for a limited period before being overwritten, and we may retain limited records where required by law. Signing out (without deleting) keeps your cloud save so you can sign back in later.
Your Choices and Controls
- Delete your account and cloud data: use Profile › Account › Delete Account in the Game, or the data-deletion page, as described above.
- Reset your local data: you can clear all locally stored data (including your anonymous player ID) by uninstalling the Game or clearing its data/storage in your device settings.
- Ad personalization (Android): you can reset or delete your Advertising ID and opt out of personalized ads in Settings › Google › Ads (or Settings › Privacy › Ads).
- Ad personalization / tracking (iOS): manage tracking in Settings › Privacy & Security › Tracking, and limit ad personalization in Settings › Privacy & Security › Apple Advertising.
- Play offline / as a Guest: you can enjoy the single-player game without signing in or connecting to our multiplayer server; as a Guest, no account or cloud data is created.
Depending on where you live, you may have additional rights under laws such as the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), or the Philippines Data Privacy Act — for example, the right to access, correct, or delete personal data, or to object to certain processing. You can exercise your access and deletion rights for account and cloud data directly through the in-app Delete Account control or by emailing us at mahjong@pamore.app. For data that stays on your device, you can access or delete it by clearing the app's data.
Data Retention and Security
Data stored on your device remains until you delete it. Cloud-saved account data is retained in Cloud Firestore for as long as your account exists; when you delete your account (in-app or by request) it is deleted as described above. Multiplayer session data is held only in memory on our server for the duration of your connection and active matches and is not persisted in a long-term database by us. Authentication and cloud-save traffic uses encrypted (HTTPS/TLS) connections, and Firebase encrypts data at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children's Privacy
Mahjong Pa More is intended for a general audience aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Playing does not require an account; account sign-in is available only to users old enough to hold an Apple, Google, or Facebook account under those providers' terms. If you believe a child under 13 (or the minimum age of digital consent in your country) has provided personal information through the Game, please contact us and we will take appropriate steps. Ads are served in accordance with the Game's age rating and applicable advertising policies for family-suitable content.
International Users
The Game may be used worldwide. Account authentication and cloud save are provided by Google Firebase, and advertising is provided by Google; both may process data in countries outside your own. Our multiplayer server processes limited session data in memory to connect players. By using the Game, you understand that this information may be processed in other countries with different data-protection laws.
Third-Party Services
The Game relies on the following third-party services, each governed by its own privacy policy:
Changes to This Policy
We may update this Privacy Policy from time to time — for example, if we add new features. When we make material changes, we will update the "Effective date" above and, where appropriate, provide notice within the Game or on our distribution page. Your continued use of the Game after an update means you accept the revised Policy.
Contact Us
If you have questions or requests about this Privacy Policy or your information, contact us at:
Henyo Games
Email: mahjong@pamore.app