Mahjong Director

Privacy Policy

Last updated: 4 September 2026

Short version: the app runs on your device and keeps your tournament there. It has no analytics and no trackers of any kind. Nothing leaves your device unless you create a live standings link — and if you do, the scores go on a web page with an unguessable address that you can pause or delete at any time.

The dividing line. Everything you do in the app — roster, seating, scoring, standings, printing — happens on your device and stays there. Two things are optional, and each is something you have to actively choose: creating an account and creating a live standings link. Nothing is uploaded unless you press a button that says so.

1. The app itself

Everything you type into Mahjong Director — event settings, player names, seating, scores — is saved only in your device's browser storage. That is what lets the app work with no internet connection at all. It is not sent to us, and we cannot see it.

You can delete it at any time with Start over in the app, or by clearing your browser or app storage. You can also export an event to a .json file to back it up or move it to another computer. That file is yours and goes wherever you send it. Exports never contain your account details or the edit key for a published page.

2. No analytics, no trackers, no cookies on the app

Mahjong Director contains no analytics, no tracking pixels, no advertising, and no third-party scripts. We do not count your visits, we do not record which features you use, and we do not set any cookies unless you sign in — in which case there is exactly one, and it is what keeps you signed in.

We are not being modest about this to sound good; it is simply how the app is built. It is a single file that runs in your browser.

3. Live standings links

The app can put your standings on a web page that players open on their own phones. This is the one feature that sends your event to us, it is part of the paid Director Plus subscription, and it is never automatic — it starts only when you press Create the live link.

When you do, a copy of that event — player names, seating and scores — is stored on our server and shown at an unguessable address such as mahjongdirector.netlify.app/r/k3f9q2xa.

Pages are unlisted. The address cannot be guessed, there is no public directory of them, and every page tells search engines not to list it.
You get an edit key when you create the link. It is stored on your device and is what lets that device update, pause or delete the page. Keep a copy; we cannot show it to you again, though you can always manage the page while signed in.
There is an initials-only option that shows "B. K." instead of full names. It is applied on our server, so full names never reach anyone looking at the page — and they are not in the page's source either.
While automatic updates are on, the app re-uploads the event a few seconds after each time you save a score, so the page keeps up. Turn the toggle off and it only updates when you press Update now.
You can pause a link — players then see the last published scores and a note saying the director paused it — or delete the page outright, from the app.

Publishing other people's names

A live standings link is a page about the people at your event. Please make sure you are entitled to share their names and results. If anyone would rather not appear, use the initials-only option, or leave them off the link entirely. If someone asks you to remove them, please do it — and if they cannot reach you, they can ask us (section 8).

4. Accounts

You only need an account for Director Plus. Running tournaments and leagues needs no account at all.

To create one we store your email address and the dates you signed up and last signed in. There is no password: you sign in with a six-digit code we email you, or the link beside it. Both expire after 15 minutes and work once.

We use your email address to send those sign-in codes and essential messages about your subscription. We do not send marketing email, and we do not sell, rent or share your address.

Sign-in emails arrive from mahjong@citrusync.com. CitruSync is the small Florida outfit that makes Mahjong Director, and it is the sending domain shared by all of our apps. It is us, not a phishing attempt.

5. Payments

Subscriptions are handled by Stripe. Your card details go directly to Stripe and are never seen by, or stored on, our servers. We keep only your Stripe customer and subscription identifiers, which plan you are on, and whether the subscription is currently active — enough to answer "should this director's live links work?" and nothing more.

6. Children's data

American mahjong tournaments are overwhelmingly adult events, and we expect our users to be adults. Even so, a live standings link is a public page with people's names on it, so:

Pages are unlisted and carry search-engine exclusion instructions by default.
The initials-only option is available on every event, and applied on the server.
If a child's name has been published without appropriate consent, tell us and we will remove it promptly — no account required.

We do not knowingly create accounts for anyone under 18.

7. Who else handles your data

We use a small number of service providers. Each one only receives what it needs.

Provider	What it does	What it sees
Netlify	Serves the app	Standard web request data, such as IP address
Cloudflare	The server behind live links, accounts and billing	Published events, account emails, subscription state
Stripe	Subscription payments	Your name, email, billing address and card details
Resend	Sends the sign-in emails	Your email address

These providers process data in the United States and elsewhere. We do not sell personal information to anyone, we do not use it for advertising, and we do not use it to train anything.

8. How long we keep things

Published events — until you delete them, or until the account they belong to is deleted.
Account details — until you delete your account.
Sign-in codes and links — 15 minutes, then they stop working.
Payment records — kept by Stripe for as long as the law requires.

9. Your choices and rights

You can, at any time:

Use the entire tournament and league app without giving us anything — no account, no upload, no internet.
Pause or delete a live standings page from the app.
Delete your account, which removes your account and every page you published. Cancel your subscription first, so you are not left paying for an account that no longer exists. Deletion cannot be undone.
Ask for a copy of your data, or ask us to correct or delete it, by emailing us.

Depending on where you live you may have additional rights over your personal information — for example under the UK and EU GDPR, or under California law. We will honour those requests wherever you are, and respond within 30 days.

10. Security

Everything travels over an encrypted connection. Sign-in tokens and page edit keys are stored only as cryptographic hashes, salted with a secret that is not in the database — so a stolen copy of our database could not be used to sign in as you or to delete your pages. No system is perfect, and we will tell affected users promptly if something goes wrong.

11. Changes to this policy

If this policy changes, the updated version is posted here with a new date at the top. If a change materially affects how we handle your information and you have an account, we will email you.

12. Contact

Questions, requests, or a takedown: support@citrusync.com. It reaches the person who makes Mahjong Director.