Privacy
Who we are
JONGG is made and run by Record Creative Co. Questions about this notice, or about anything we hold about you, go to hello@jongg.app.
What we keep, and why
We keep what the game, your tables and your game nights need to work, plus optional activity as explained below:
- The name you play under, and your games: the moves, results, ratings and replays. Full game replays require a player’s session from that game or an account with verified access to that history. Knowing the replay link is not enough.
- If you sign in with Apple, Google or email and password: the account identifier the provider gives us, and your email address and name if it shares them.
- If you have an account: a short practice record of the lessons, practice and member drills you finished and the game reviews you opened, with their dates. It holds no hands or choices, and it is downloaded and deleted with your account.
- Game nights and clubs: event details, guest names, RSVPs and notes needed to run them. People with a night link can see its title, host, time, house rules and headcounts. Before play starts, guest names are shown to the host and guests who have answered; guests see who is Going and their own answer, but not anyone else’s Maybe or Can’t. Once play starts, player names, results and thank-you notes can be visible through the link. Saved venues stay private to the host unless the host deliberately shares a public venue with link holders or, where qualified verification is available, chooses confirmed guests only. Directions access can expire or be withdrawn. Opening a map or copying/downloading an address creates a copy outside JONGG that revocation cannot recall. Private notes to the host stay host-only.
- Where private-directions verification is available: your requested code is only for directions to that night, not account sign-in or event-update consent. The directions ledger does not store your email address or plaintext code; it keeps short-lived verification records and keyed abuse-prevention hashes. A selected delivery provider processes the address to send your requested code and must be named and qualified before this capability is enabled.
- Game cards, replay clips, sets and public link previews are visible to anyone with their links and may show player names, results and winning hands. We also keep your Notify me requests about tile sets.
- On the phone app, if you allow notifications: the device's push token and the kinds of notification you chose.
- Where photo reading is available, asking “What can I make?” sends your rack photo to Anthropic's Claude to name the tiles. JONGG uses it for that request and does not store the photo. Anthropic processes it under its commercial API terms; its own retention and safety rules apply. You can enter tiles yourself instead.
- If you buy JONGG Membership or a tile set: which plan or set, its dates and status (trial, renewing, canceled, payment problem, refunded) and the store's purchase identifiers, so it works on the web and in the app. We never see your card number.
- Membership service messages can include a welcome, a note before a trial ends and a failed-payment notice. These are separate from any marketing emails you choose to receive.
- Support and safety: the information you send us, reports and their reasons, blocks and the records needed to investigate problems and enforce our rules. Reports are not public.
- Our host's ordinary request logs, which can include your IP address, kept to run and protect the service.
Cookies and device storage
Your browser or phone keeps your settings and, if you sign in, your session. We use jongg_session to maintain your signed-in session, or a short-lived seat at a table while you play without an account. jongg_play remembers that you have played, so the site opens on your tables next time. jongg_analytics remembers only your on/off usage preference for one year; device storage also remembers this choice so signing out does not reset it. During purchase recovery, the app can retain a limited transaction record linked to its original account until it can confirm the outcome. A deletion request can leave a private status-recovery token on the device so you can check the original request after signing out. We use no advertising cookies.
Optional activity measurement starts on for new signed-in visitors to our US website. Turn it off anytime under Account → Data & privacy. Existing choices are preserved; older visitors whose choice is unknown stay off. In the international phone app it stays off until you choose to allow it under Settings. It counts selected play, invitation, learning, collection and purchase-step milestones. We keep it on our own server at Fly.io for up to 90 days, using a random identifier linked to your account so you can export or delete it. It is not anonymous data. When you play without an account, we keep no activity linked to you: the server counts some play only as anonymous totals with no account, session or device identifier.
Optional activity excludes private hands, invitation addresses, names, contact details, photos, messages, payment details, IP addresses and full web addresses. We do not fingerprint your device, record your screen or send activity to advertisers. Ordinary service and security records remain separate.
Turning optional activity off stops collection, clears activity waiting to be sent and deletes the retained optional activity for your account, across its devices. We retain the Off preference beyond the 90-day activity window so it stays off; deleting your account removes that preference too. The browser remembers Off through reloads, sign-in and sign-out. Clearing browser storage removes its local reminder, but a saved account opt-out still applies when you sign in. App devices require their own explicit permission. Your account download includes retained optional activity. Switching on later collects future activity only.
Separately, we count how often the Membership offer and plans are shown and pressed, as plain daily totals reported over a rolling 90-day window. These totals contain no account, session or device identifiers and are separate from optional activity. The requests still pass through our host, whose ordinary service and security logs are described above.
Deleted activity can remain in restricted backups until those backups expire. It is excluded from ordinary reports, and restoring a backup requires clearing that historical activity before optional measurement can resume.
Who else handles it
The services that run JONGG include Fly.io, which hosts the game in the United States; Supabase, which handles account authentication, including email/password sign-in, email confirmation and password recovery; Apple and Google when you choose their sign-in; Expo for app notifications; Anthropic for requested rack-photo reading; and Resend for configured account and service emails. Each receives the data needed for its part. Data may be processed outside your country. We don't sell personal information or use it for advertising.
If you buy a collection or JONGG Membership, Apple handles payment for purchases in the iPhone and iPad app. New web membership purchases use Stripe Billing through RevenueCat, with Stripe Managed Payments handling the sale and tax collection. Earlier RevenueCat Billing purchases keep their original billing records and terms. RevenueCat and JONGG keep the account-linked purchase records needed to confirm ownership, provide member features, restore purchases and handle renewals, cancellations and refunds. RevenueCat also uses purchase history for its billing reports. These records are separate from optional activity measurement.
The payment services receive the information needed for checkout, such as payment details and, on the web, your billing email and any required billing address. JONGG does not store your full card number. Purchase records include a billing account identifier, product, transaction, payment state and subscription dates. We do not use them for advertising.
Keeping and deleting
We keep account and game records to provide the service. Your own replays are kept for at least 30 days, and for the card year while you're a member; a replay linked from an achievement, a best hand, your recent games, a Wrapped or a share stays while that link does. Older game records may be removed. Shared results needed for other players’ history or ratings may remain after your own account data is removed.
You can ask for a copy, correction or deletion by writing to hello@jongg.app. Use your account email if you have one; we may need to verify your identity before giving out or removing private records. A display name alone is not proof of ownership. We'll answer within 30 days and explain the outcome or any remaining steps.
Account → Data & privacy on the web and Settings in the app contain the data controls available for your account, including a download and, where enabled, account deletion. If a control is unavailable, contact us. Turning optional activity off erases that activity; it does not delete your account or cancel purchases.
An accepted deletion request can remain pending while account and provider cleanup finishes. Keep its status receipt and check the original request rather than starting again. The confirmation explains any effect on hosted nights and purchases. Apple subscriptions must be canceled separately through Apple. Deleting an account with a web subscription cancels that subscription as part of cleanup, ends remaining access and does not automatically refund it; cancellation is not confirmed while provider work is pending.
Some billing, transaction, dispute and deletion records must remain restricted after account deletion for accounting, unresolved purchases, fraud prevention and to stop a removed account or purchase being restored by a late receipt. These records can still be linked to the former account; they are not anonymous. They are not used for marketing or to grant new access. We review continued need and remove records when the applicable obligations and recovery dependencies end, rather than applying one expiry date to every record.
Deleted information can remain in restricted recovery backups until they expire. Restoring a backup must apply the later deletion records before the service reopens; it must not reopen a deleted account. Copies other people have saved outside JONGG are outside our control.
Children
JONGG is not meant for children under 13, and we don't knowingly keep their information. If you think a child has given us theirs, write to hello@jongg.app and we'll remove it.
Changes
When this notice changes, we'll update it here and move the date at the top. A change that affects what we collect will be posted before it takes effect.
Google Analytics on public guides
Analytics choices in the footer of participating public pages lets you allow or turn off Google Analytics in this browser. It starts off. If you allow it, Google receives public page visits, recognized campaign labels, and clicks to Play, Learn or Host. Loading the Google tag shares network and browser information, including your IP address, with Google. Analytics cookies and permission last up to 60 days. We disable advertising features. The app, game tables, account and private invitations use separate controls.
Choose Keep off to stop future collection and clear these Google Analytics cookies. This choice is separate from deleting your JONGG activity. Google’s event-level retention is set to two months. Aggregated reports can last longer.