Mahjboard ("Mahjboard," "we," "us," or "our") is a mahjong-league scorekeeping and public-leaderboard app operated by Maybe Tomorrow, LLC (maybetomorrow.studio). This Privacy Policy explains what information we collect when you use the Mahjboard app and the public leaderboards we host, how we use it, and the choices you have.
If you have questions about this policy or your data, email us at hello@mahjboard.com.
Who this policy is for
Mahjboard is used by two kinds of people:
- Organizers — people who run a league, hold a Mahjboard account, and enter scores in the iOS app.
- Participants & viewers — players and spectators who view a public leaderboard that an organizer has shared. Participants do not need an account or the app.
What we collect
Organizer account information
When you create an organizer account, you sign in with Sign in with Apple. Through that, we receive your name and an email address. If you choose Apple's private-relay (Hide My Email) option, we receive and fully support that relay address — we receive only that relay address and never your real email, and we'll use the relay address for any account-related contact.
Content you enter as an organizer
To run a league, you provide content such as:
- League details — name, location, start date, number of sessions, and your branding (logo and brand colors);
- Participant display names — the names you choose to show on the leaderboard for each participant (shown in the app as "Players");
- Scores and attendance you record for each session.
We do not require or ask you to provide participants' real names, contact details, or any other personal information about your players — only the display names and scores you choose to enter.
Important — public leaderboards are public. When you publish a leaderboard, it is reachable by anyone with the share link or QR code. That means the participant display names and scores on it are publicly visible by design — that is the whole point of a shareable leaderboard. As the organizer, you are responsible for using display names your participants are comfortable with appearing in public (for example, a first name and last initial, a nickname, or a player number rather than a full legal name).
If you are a participant who appears on a public leaderboard and you'd like your display name changed or removed, contact the organizer who runs your league first — they control the content. You can also email us at hello@mahjboard.com with the leaderboard link and we'll help facilitate a correction or takedown.
How we use your information
- To provide and operate the service — let you sign in, create and manage leagues, enter scores, and generate share cards;
- To render the public leaderboards you publish, at their share URLs;
- To contact you about your account, billing, or important service notices;
- To maintain security, prevent abuse, and debug problems.
What we do not do
- We do not sell your information, or your participants' information, to anyone.
- We do not run third-party advertising and do not use ad-tracking or cross-app tracking.
- We do not use your league data to build advertising profiles.
Analytics
To understand how Mahjboard is used and to fix what's broken, we use two privacy-preserving analytics tools. Both are designed to measure usage in aggregate — they do not build personal profiles, do not track you across other apps or websites, and we do not sell any of this data.
- TelemetryDeck (in the iOS app). This tells us things like which screens are used and whether a feature is working — for example, how often scores are entered or a leaderboard is shared. Signals are anonymized: TelemetryDeck does not use Apple's advertising identifier (IDFA), and any device identifier is hashed so that signals can't be tied back to you or your Apple account. We use it only to improve the app, and data is retained in aggregate.
- Fathom Analytics (on our website and public leaderboards). When you visit mahjboard.com or a public leaderboard, Fathom records anonymous, aggregate stats such as page views and rough referrer and country — without cookies and without storing personal data. It is GDPR- and CCPA-compliant by design and does not track visitors across other sites. We use it to understand traffic to our pages, and data is retained in aggregate.
Where your data is stored & how it's protected
Mahjboard runs on Cloudflare. Account and league data is stored in Cloudflare D1 (our database), and uploaded files such as logos and generated score cards are stored in Cloudflare R2 (object storage). Data is transmitted over encrypted connections (HTTPS), and access to production systems is restricted. No method of storage or transmission is ever completely secure, but we work to protect your information using industry-standard practices.
Data retention & deletion
We keep your league data for as long as your account is active so the service works as you expect. You're in control of your content:
- Archive a completed season to keep it for your records;
- Delete a league — when you delete a league, its leaderboard is taken down and its participant display names and scores are removed;
- Delete your account—you can delete your entire account from right inside the app: open the Account screen and tap Delete Account. This permanently removes your account and all associated data—every league, player, and score—and takes down the public leaderboards you've published. If you'd rather not use the in-app option, you can also email hello@mahjboard.com from the address on your account and we'll process it for you. We may retain limited records where required for legal, tax, or fraud-prevention reasons.
Your privacy rights (U.S. residents, including California)
Depending on where you live, you may have the right to know what personal information we hold about you and to access a copy; to receive a copy of your data in a portable format; to request correction of inaccurate information; to request deletion; and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information (including for cross-context behavioral advertising), so there is nothing to opt out of — but you may still exercise your other rights, and we will not discriminate against you for doing so. The categories of personal information we collect are described above: your name and email (via Sign in with Apple) and the league content you enter (league details, participant display names, scores, and branding). To make a request — including to receive an export of your data in a portable, machine-readable format — email hello@mahjboard.com from the address on your account; we may need to verify your identity before acting.
For users in the EEA and UK
If you are in the European Economic Area or the United Kingdom, Maybe Tomorrow, LLC is the data controller for organizer account data. We process your information to perform our contract with you (providing the Service), to comply with legal obligations, and for our legitimate interests in operating and securing the Service. You have the right to access, correct, delete, port, restrict, or object to processing of your personal data, and to lodge a complaint with your local supervisory authority. Our service runs on Cloudflare; where your data is transferred to or stored in the United States, we rely on appropriate safeguards for international transfers. To exercise any right, email hello@mahjboard.com.
Children's privacy
Mahjboard is intended for organizers running their leagues and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we'll remove it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date at the top of this page, and for material changes we'll provide additional notice where appropriate.
Contact us
Maybe Tomorrow, LLC — maker of Mahjboard
hello@mahjboard.com