Privacy Policy
What we collect, why, and what you can ask us to do about it. The short version: we ask for your email address only if you want to hear from us, we do not sell it, and you can have it deleted at any time.
Who we are
EASTA publishes guides and reference material about American Mah Jongg and is developing a line of mahjong sets. This policy covers eastamahjong.com and explains how we handle personal information collected through it.
We control that information. You can reach us about anything on this page at privacy@eastamahjong.com.
The short version
- We collect your email address if, and only if, you ask us to send you something.
- We record the cookie choice you make on your first visit, so we can respect it.
- We do not sell your personal information, and we do not share it for advertising.
- We run no advertising and no third-party tracking pixels.
- You can ask us to delete everything we hold about you by emailing privacy@eastamahjong.com.
What we collect
Information you give us
The only personal information we ask you for is your email address. We collect it when you:
- sign up for our beginner’s guide or for email updates; or
- write to us, whether through the contact page or by email.
We do not ask for your name, postal address, phone number or payment details, because we are not selling anything on this site yet.
Information collected automatically
Like every website, ours produces records as it serves pages. Our hosting provider keeps standard server logs, which include IP addresses, the pages requested, and the time of the request. These are used to keep the site running, to diagnose faults, and to defend against abuse.
Information we do not collect
We want to be specific about this, because most privacy policies are not:
- We have no analytics service installed. We are not measuring your visit with Google Analytics or anything like it.
- We run no advertising and no retargeting, ours or anyone else’s.
- We collect no payment information, because no payment is possible on this site.
- We do not knowingly collect information from children under 13.
Cookies
Cookies are small files a site stores in your browser. Ours fall into one category today.
Strictly necessary cookies. These keep the site working — recognising a logged-in administrator, protecting forms against abuse, and remembering the cookie choice you made so we do not ask you again. They cannot be switched off without breaking parts of the site.
We set no analytics and no advertising cookies. If we ever add analytics, it will be consent-gated, it will be disclosed on this page before it goes live, and you will be able to decline it without losing access to anything.
Our cookie banner lets you accept or reject non-essential cookies, and you can revisit that choice at any time by clearing the site’s cookies in your browser and reloading the page. Your browser’s settings also let you block or delete cookies outright.
How we use your information
- to send you the guide or the updates you asked for;
- to reply to your message;
- to keep the site secure and prevent abuse;
- to meet our legal obligations.
That is the whole list. We do not use your email address for anything you did not ask for, and we do not build profiles of you.
Our email list
Our mailing list is managed by Brevo (Sendinblue SAS), which stores your email address and delivery records on our behalf. Sign-up uses double opt-in: you are not added until you click the confirmation link in the email we send you. If you never confirm, you are never subscribed.
Every email we send includes a one-click unsubscribe. You can also email us to be removed entirely, and we will delete your address rather than simply suppressing it.
Who we share information with
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We have never done either.
We share information only with service providers who process it on our behalf, under contract, for the purposes described above:
- Brevo — email delivery and mailing list management
- Cloudflare — DNS and email routing
- Our hosting provider — serving the site and storing backups
We may also disclose information where the law requires it, or where it is necessary to protect our rights or the safety of others. If we are ever acquired or merged, information may transfer as part of that transaction; this policy would continue to apply until updated.
How long we keep it
- Mailing list: until you unsubscribe or ask us to delete you.
- Messages you send us: long enough to resolve your question, and no more than 24 months.
- Cookie consent records: kept as evidence that we honoured your choice.
- Server logs: retained by our hosting provider on its standard schedule, typically a short period.
Your California privacy rights
If you live in California, the CCPA and CPRA give you the right to:
- Know what personal information we collect, use and disclose, and why.
- Access a copy of it.
- Correct information that is inaccurate.
- Delete information we hold about you.
- Opt out of the sale or sharing of your personal information. We do neither, so there is nothing to opt out of — but if that ever changes, we will say so here and provide a working opt-out before it does.
- Limit our use of sensitive personal information. We collect none.
- Not be discriminated against for exercising any of these rights. We will not degrade your experience or withhold anything for asking.
To make a request, email privacy@eastamahjong.com with enough detail for us to find you — usually just the address you signed up with. We will confirm you control that address before acting. We respond within 45 days, and will tell you if we need one 45-day extension.
You may use an authorised agent to make a request for you, with written permission we can verify.
A note on scope. Statutes like the CCPA apply to businesses above certain size thresholds, and we may not meet them. We have written this section to apply to every California resident regardless, on the view that the rights are reasonable ones to offer whether or not a statute compels us to.
Other US state privacy rights
A growing number of states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana — give residents similar rights to access, correct, delete and port their information, and to opt out of targeted advertising or the sale of personal data.
We honour requests from any US resident on the same terms described above. Email privacy@eastamahjong.com and say which state you are in.
Security
The site is served over HTTPS, and access to the systems holding your information is limited to those who need it. We keep the software up to date and take backups.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal information, we will tell you and the relevant authorities as the law requires.
Children
This site is written for adults and is not directed to children under 13. We do not knowingly collect their personal information. If you believe a child has given us information, email privacy@eastamahjong.com and we will delete it.
Visitors outside the United States
We are based in the United States, and the information we hold is stored and processed there. If you visit from elsewhere, that means your information is transferred to a country whose privacy laws may differ from your own.
WHEN WE START SELLING
This section exists to be deleted, or to be replaced with real content, on the day we begin taking orders. Nothing on this site is for sale today: there is no cart, no checkout, and no way to give us payment details.
Before that changes, this policy will be revised to describe the payment processor, the shipping and billing information required to fulfil an order, the retention period for order records, and any tax or accounting obligations that apply. It will be updated before the first transaction, not after.
Changes to this policy
If we change this policy we will post the new version here and update the date above. If the change materially affects how we handle your email address, we will tell you by email as well, rather than relying on you to notice.
Contact us
Questions, requests, or complaints about privacy:
privacy@eastamahjong.com
If you are not satisfied with our response, you may have the right to complain to your state attorney general or, outside the United States, to your local data protection authority.