Privacy policy.

Who we are

Orion Designs LLC, based in St. Petersburg, Florida, United States, operates Tile League at tileleague.com and the Mahjong app. In this policy, “we,” “us,” and “our” mean Orion Designs LLC. We are the controller of personal information we process for the purposes described here.

This policy covers our website, the Mahjong app and associated services, and communications you send us. App features described below apply when you use those features. An App Store “coming soon” notice does not make an unreleased feature available.

For privacy questions or requests, contact privacy@joinmetric.com. For product support, contact support@joinmetric.com.

When you visit this website

You can read the Tile League website without creating an account. The site does not have advertising pixels, behavioural analytics scripts, a mailing-list form, or a payment form.

The website follows your device’s light or dark appearance setting. It does not use cookies or local storage to save an appearance preference.

We use your browser’s language preference to suggest a language. If you choose a language in the footer, we save that choice in local storage on your device so it can be remembered on your next visit. This preference is not used for tracking or advertising. You can change it in the footer or remove it by clearing this site’s stored data in your browser.

Cloudflare provides website hosting and network protection. Delivering and protecting a web request involves information such as your IP address, requested URL, browser information, and request time. Cloudflare may process network and security logs and use security cookies when its protections require them. We do not use those protections to build advertising profiles. Cloudflare’s own processing is described in its privacy policy.

Information in the app

The information involved depends on how you use Mahjong:

• Local play and preferences. Games, hand results, scoring records, app preferences, and progress can be stored on your device. Connected features synchronise relevant profiles, progress, saved sessions, and game records through our Cloudflare backend. Sign in with Apple provides an app-specific identifier and authorization tokens to create or link your account and verify access. Existing migrated players keep their account and purchases when linking Apple on their signed-in device.
• Profiles. A profile can include a display name, handle, stable player identifier, selected character and cosmetics, and gameplay statistics. A birthday entered for character selection stays in the app’s local preferences and is not part of your public profile.
• Groups and social play. Group membership, friend requests, invitations, game names, participants, scores, and shared game records support play and recordkeeping with others.
• Ratings and leaderboards. Match outcomes, completed hands, rule versions, ratings, uncertainty, and related verification information support MRS. Cloudflare stores and processes multiplayer games and their results. Game Center is used only for global leaderboards, including Apple’s player identifiers, display information, leaderboard scores, and a reference to your Mahjong profile.
• Purchases. If you use Jade or cosmetic purchases, Apple, RevenueCat, and our commerce service process purchase identifiers, transaction and entitlement information, virtual-currency balances, redemption records, and relevant gameplay reward claims. Our service uses a stable account identifier and device attestation information to associate and protect these operations. An account identifier is personal information when it can be associated with a player.
• Support. We receive your email address and any messages, attachments, or diagnostic details you choose to send us. Please avoid sending passwords, payment-card numbers, or information about other people that we do not need.

We do not receive your Apple Account password or full payment-card details from an App Store purchase. Apple handles the payment process.

Photos and device permissions

If you choose a photo-assisted hand feature, the app asks for the relevant camera or photo access. In the current implementation, supported hand recognition uses Apple’s on-device Foundation Models. The app does not send hand photographs to an Orion Designs server or an external AI provider for recognition.

Recognition depends on the device, operating system, language, and model availability. When it is unavailable, you can enter tiles manually. Photo suggestions are editable and can be wrong; they do not independently determine a final score.

You can change camera and photo permissions in your device settings. A photograph you separately send to support is processed as a support attachment, rather than through the on-device recognition flow.

Advertising measurement and your choice

Mahjong uses AppsFlyer to measure which advertising campaigns bring players to the app. If you allow tracking in Apple’s permission prompt, AppsFlyer and our advertising partners, including Meta, can receive advertising and app-install identifiers, a pseudonymous account identifier, device and network information, app opens, and purchase conversion events. RevenueCat forwards verified purchase and subscription events, including renewals and refunds, to AppsFlyer so we can measure advertising performance.

Tracking is optional. If permission is denied or restricted, we disable advertising and vendor identifier collection in AppsFlyer, anonymise its measurement, block partner event sharing, and do not link new RevenueCat purchase events to AppsFlyer. Apple’s SKAdNetwork can still provide aggregate campaign measurements. We do not send your name, email, birthday, photographs, private game records, or iCloud record name to AppsFlyer or Meta through this integration.

You can change your choice in iOS Settings → Privacy & Security → Tracking. Mahjong applies that choice when it next becomes active; server-side changes require a network connection. Refusing tracking does not limit gameplay, purchases, or premium access. For deletion of previously collected information, contact privacy@joinmetric.com. See AppsFlyer’s privacy policy and Meta’s privacy policy.

How information is used and shared

We use personal information to provide and maintain play, scoring, synchronisation, profiles, social features, purchases, and ratings; respond to support and privacy requests; prevent fraud and abuse; resolve technical problems; and meet legal obligations or establish and defend legal claims.

Apple provides Sign in with Apple, Game Center, App Store services, and device security features. RevenueCat supports purchase and virtual-currency management. Cloudflare hosts the website, app and commerce backends, and stores profiles, social connections, groups, game records, progress, and notification-delivery information. Apple Push Notification service delivers device notifications. These providers receive the information needed for their services and may also act independently for some purposes under their own terms. See Apple’s privacy policy, RevenueCat’s privacy policy, and Cloudflare’s privacy policy.

Other players can see information you make available through public and shared features. Public profiles can expose your handle, display name, chosen character, ratings, and selected gameplay and social statistics. Shared groups and matches disclose relevant identities, game records, and scores to participants. Game Center visibility also depends on Apple’s settings. Use a public name you are comfortable sharing.

We may disclose information to professional advisers, to comply with a valid legal requirement, to protect people or the service, or in a business transfer subject to applicable privacy protections. We do not sell personal information for money. When you permit app tracking, the advertising measurement sharing described above may qualify as “sharing” or targeted advertising under applicable privacy laws.

Retention and security

Local information remains on your device until removed through the app or device controls. Cloud, shared, commerce, and support records have different purposes and are not necessarily deleted when you uninstall the app.

We retain personal information for as long as reasonably needed to provide the feature, fulfil the purpose for which it was collected, resolve disputes, protect transaction and rating integrity, and satisfy legal requirements. We consider the sensitivity of the information, account activity, the needs of other participants in shared records, and applicable retention duties. When information is no longer needed, we delete it or de-identify it, subject to backup and legal-retention requirements.

We use technical and organisational safeguards appropriate to the information and service. No storage or transmission method can guarantee absolute security. You should protect your device and Apple Account and promptly report suspected unauthorised activity.

Your choices and rights

You can edit available profile fields in the app, manage device permissions and Apple privacy settings, and choose whether to use optional social and purchase features. Some information is necessary to provide a feature; declining it may mean that feature cannot work.

In the app, open Settings → Delete account to permanently remove your Mahjong profile, birthday, progress, groups you own, friends, and commerce account, including unused currency and cosmetics. Your authenticated Mahjong session verifies ownership. If deletion is interrupted or purchase data is still processing, keep the app installed and use Retry account deletion until completion is confirmed. Deleting your account does not cancel App Store subscriptions; use Manage subscriptions in the deletion screen to cancel or manage them.

Deleting a local app copy does not automatically delete Cloudflare, Game Center, RevenueCat, or commerce records. Older beta data retained in your Apple-managed iCloud storage may require separate removal through Apple. Shared history held by other players and Apple-managed Game Center and App Store records may remain. We retain minimal account identifiers, deletion timestamps, and retired-profile markers in our backend to prevent stale devices from restoring your account. Apple-managed information may require action through Apple.

For access, correction, a copy of your information, or help completing deletion, contact privacy@joinmetric.com. Describe your request and provide enough information to locate your profile; never send your Apple password. We may need to verify your identity before acting.

Depending on your location and which laws apply, you may have rights to access, correct, delete, or obtain portable information; restrict or object to processing; withdraw consent; use an authorised agent; appeal a decision; or complain to a privacy regulator. We will respond within the applicable legal time limits and will not unlawfully discriminate against you for exercising your rights. Appeals can be sent to privacy@joinmetric.com with “Privacy appeal” in the subject line.

The website has no advertising pixels or cross-context advertising sharing, including when your browser sends a Global Privacy Control signal. For the Mahjong app, deny or revoke tracking permission in iOS Settings to opt out of the advertising sharing described above, or contact privacy@joinmetric.com for help. We do not use profiling to make decisions with legal or similarly significant effects about you.

International visitors

We are based in the United States, and our providers may process information in other countries. Privacy laws in those countries may differ from those where you live.

Where the GDPR or UK GDPR applies, our legal bases depend on the activity: performing a contract to provide requested app features; legitimate interests in operating, securing, and supporting the service where those interests are not overridden by your rights; compliance with legal obligations; and consent where required. You can withdraw consent without affecting the lawfulness of earlier processing.

Where a restricted international transfer requires safeguards, we must use an applicable lawful transfer mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact privacy@joinmetric.com for information about the mechanism applicable to your data. You can complain to the supervisory authority where you live or work or where an alleged infringement occurred.

Children and policy changes

Our online services are not directed to children under 13, and we do not knowingly collect their personal information. Where local law requires a higher age for consent, that requirement applies. If you believe a child has provided personal information without appropriate authorisation, contact privacy@joinmetric.com so we can investigate and take appropriate action.

We may update this policy as the service changes. We will update the date on this page and provide additional notice or obtain consent when the law requires it. Please review the policy when choosing to use a new feature.