Last updated: 19 September 2026
Mahjong Room (“the Game”, “the app”) is published by SparkArk Studio (“we”, “us”), registered at ul. Narutowicza 12b/2, 70-240 Szczecin, Poland. For the personal data described below we act as the data controller within the meaning of the EU General Data Protection Regulation (GDPR).
Email is how to reach us, and the fastest route for every request in this policy: sparkarkstudiosocial@gmail.com. We answer at that address; the postal address above is our registered address, published because Article 13 requires it, and writing to it will only be slower.
Mahjong Room has no accounts and no sign-up. You never give us a name, an email address or a password, and the whole game is playable offline. Your progress lives on your phone.
What does leave the device is limited to: anonymous gameplay statistics and crash reports (Google Firebase), and the data an advertising SDK needs to serve ads (Google AdMob). We do not sell your data, and we never receive your name, your email address, your contacts, your photos or your precise location.
Most of what the Game stores never leaves your phone. It is written to the app's own private storage and is deleted when you uninstall the app or clear its data. We have no copy of it and no way to read it. It includes:
Reminder notifications are scheduled and displayed entirely by your device. No notification data is sent to us or to any server.
Three Google services are built into the Game. Each of them receives a defined, limited set of data.
Used to understand how the Game is played so we can balance difficulty and fix the places where players get stuck. Firebase assigns a randomly generated app instance ID — an identifier for the installation, not for you as a person — and records events such as:
Alongside the events, Firebase automatically collects technical context: device model, operating system version, app version, language, and the country derived from your IP address. Firebase does not store your full IP address in our reports.
When the Game crashes, Crashlytics sends us a report so we can fix it: the stack trace, the device model and OS version, the app version, and the state of the device at the moment of the crash (for example free memory). It uses its own randomly generated installation identifier. Crash reports contain no personal content.
The Game is free and funded by ads. To select, deliver, measure and protect those ads, the AdMob SDK processes:
Whether these are used for personalised or non-personalised advertising depends on the choice you make in the consent form, which is shown where your region requires it (the EEA, the UK and Switzerland) and which you can reopen at any time — see Ad Partners & Advertising.
Google acts as an independent controller for some of this processing. Its own policies apply: the Google Privacy Policy and How Google uses information from sites or apps that use our services.
Achievements and the “Highest Level” leaderboard run on Google Play Games Services (Android) and Game Center (iOS). These are optional. If, and only if, you sign in with your platform account, the platform receives your gamer identifier and the achievements and score you post, and it may display your gamer alias on a public leaderboard. That account and its data are managed by Google or Apple under their own privacy policies, not by us.
The Game checks whether a network connection exists so it can tell you that an ad cannot be loaded offline. This check reads the connection type only. It transmits nothing and inspects no traffic.
We do not collect or receive your name, email address, phone number, postal address, contacts, calendar, photos, microphone or camera input, precise (GPS) location, health data, browsing history outside the Game, or any payment information. The Game requests no such permissions.
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Running the Game, saving your progress and settings | On-device data (section 3) | Performance of a contract, Art. 6(1)(b) — this is the service you asked for |
| Showing non-personalised ads to fund the Game | Advertising data (section 4.3), without profiling | Legitimate interests, Art. 6(1)(f) — keeping a free game financially viable |
| Showing personalised ads and storing/reading identifiers on your device | Advertising data (section 4.3), with profiling | Your consent, Art. 6(1)(a), given through the consent form and withdrawable at any time |
| Gameplay statistics and difficulty balancing | Analytics events (section 4.1) | Consent where your region requires it; otherwise legitimate interests, Art. 6(1)(f) — improving the Game |
| Diagnosing and fixing crashes | Crash reports (section 4.2) | Legitimate interests, Art. 6(1)(f) — a stable, working app |
| Achievements and leaderboards | Platform gamer ID and posted scores (section 4.4) | Your consent, given by signing in to the platform service |
| Reminder notifications | On-device schedule only | Your consent, given through the operating system permission prompt |
Where we rely on legitimate interests, we have weighed them against your rights and concluded they do not override your interests, in particular because the data is tied to an installation rather than to your identity and is not used to make decisions about you. You may object to that processing at any time — see Your rights.
We do not sell personal data and we do not share it with data brokers. Data is shared only with the service providers that make the Game work:
| Provider | Role | Privacy policy |
|---|---|---|
| Google Ireland Limited / Google LLC — Firebase Analytics & Crashlytics | Processor acting on our instructions | firebase.google.com/support/privacy |
| Google Ireland Limited / Google LLC — AdMob | Independent controller for ad serving and measurement | policies.google.com/technologies/ads |
| Google Play Games Services / Apple Game Center | Independent controller, only if you sign in | Google · Apple |
| Google Play / Apple App Store | Distribution; they collect their own install and usage statistics | Google · Apple |
The advertising demand partners that may serve an individual ad through AdMob are described in Ad Partners & Advertising.
We may also disclose data where we are legally obliged to, or where it is necessary to establish, exercise or defend legal claims.
Our providers process data in the European Union and in the United States. Where data leaves the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses and by the providers' certification under the EU–US Data Privacy Framework, together with supplementary technical measures such as encryption in transit and at rest. You may request a copy of the relevant safeguards by writing to us.
Under the GDPR you have the right to:
Because the Game has no accounts, we usually cannot link a request to a specific person on our own. To act on an access or erasure request we need the identifier tied to your installation — the Game shows it to you under Settings → Privacy → Data Deletion. The procedure is set out in full on the Data Deletion page.
We answer requests within 30 days. If you believe we have handled your data improperly you may lodge a complaint with your national supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), uodo.gov.pl; you may equally complain to the authority in your own country of residence.
Mahjong Room is a general-audience game. It is not directed to children and is not designed for or marketed to them. We do not knowingly collect personal data from children under 13 (or under the higher age of digital consent that applies in some EEA countries, up to 16).
Ad content is limited to a “PG” maximum rating, and the Game is not declared as child-directed to our advertising provider. If you are a parent or guardian and believe your child has provided data to us, write to sparkarkstudiosocial@gmail.com and we will delete it.
On-device data is held in the app's private storage, which the operating system isolates from other apps. All network traffic between the Game and our providers uses TLS encryption. Our providers maintain their own certified security programmes. No system is perfectly secure, but the Game holds no credentials, no payment data and no directly identifying information, which sharply limits what any compromise could expose.
The consent form described in section 4.3 is shown before any personalised advertising and is the mechanism through which consent under the GDPR and the ePrivacy Directive is collected. You can reopen and change it at any time from Settings → Privacy → Ads Consent & Opt-Out. Declining does not remove ads; it makes them non-personalised.
We do not sell personal information for money. Personalised advertising may, however, count as “sharing” for cross-context behavioural advertising under the CPRA. California residents have the right to know, to delete, to correct, to opt out of that sharing, and not to be discriminated against for exercising those rights. To opt out, use Settings → Privacy → Ads Consent & Opt-Out in the Game, or reset/delete your advertising identifier in your device settings. Requests may be sent to sparkarkstudiosocial@gmail.com.
Brazilian users hold equivalent rights of confirmation, access, correction, anonymisation, portability, deletion and information about sharing, exercisable through the same contact address.
We may update this policy as the Game changes or as the law requires. The “last updated” date at the top always reflects the current version. Material changes — a new category of data, a new purpose, a new provider — will be announced inside the Game before they take effect. Continuing to play after a change means you accept the updated policy, except where the change requires your consent, which we will ask for separately.
Email us — it is the preferred and fastest channel for privacy
questions, requests and complaints:
sparkarkstudiosocial@gmail.com
Registered address (postal mail is answered, but far more slowly): SparkArk Studio, ul. Narutowicza 12b/2, 70-240 Szczecin, Poland