Privacy Policy

Effective: Upon publication.

This Privacy Policy describes how LUCL Holdings LLC, the owner and operator of the Mahj Muddle service ("Mahj Muddle," "we," "us"), collects, uses, and shares information when you use our service. Your use of Mahj Muddle is also governed by our Terms of Service.

1. What We Collect

Information you give us directly:

• Name, email address, phone number (optional), and password (which

we store hashed, not in plain text).

• Display name and profile photo (if you choose to upload one).
• Communication preferences.

Information we collect automatically:

• Login times and IP addresses, used for security and fraud

prevention.

• Pages you visit on the platform, used to understand product use

and improve the Service.

• Device and browser information.

Information we collect through Stripe:

If you make a payment, Stripe processes your payment information directly. We do not see or store your full credit card number. Stripe shares with us a summary of the transaction (amount, date, last 4 digits of the card, status). See Stripe's privacy policy at stripe.com/privacy for how Stripe handles your data.

Information about matches and scores:

When you participate in matches, we record your score, opponents, and outcome. This information is visible to other players in your Muddle as part of league standings and leaderboards.

2. How We Use Information

We use your information to:

• Provide the Service (run leagues, schedule matches, track scores,

process payments).

• Send you transactional emails (match confirmations, score

notifications, payment receipts) and announcements you've opted into.

• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations including tax reporting through

Stripe.

• Improve the Service.

3. Who We Share Information With

Your Muddle's Operator and other players in your Muddle. Your name, scores, match history, and league standings are visible to others in your Muddle. Your email address is visible to your Muddle's Operator for league communications.

Service providers:

• Stripe processes payments and handles tax reporting.
• Resend delivers our transactional emails.
• Railway hosts our servers.
• Cloudflare provides DDoS protection and DNS.

These providers have access only to the information they need to perform their service.

Legal obligations. We may disclose information if required by law, subpoena, court order, or to protect our legal rights.

Business transfers. If Mahj Muddle is acquired or merges with another company, your information may transfer to the new owner, subject to this Privacy Policy.

We do not sell your personal information.

4. How Long We Keep Information

We retain your information as long as your account is active. After you delete your account:

• Your profile and personal information are removed within 90 days.
• Acceptance records, payment receipts, and tax-relevant records

are retained as required by law.

• Anonymized statistical data (aggregated league outcomes) may be

retained indefinitely.

Deleted information may persist in backups for up to 12 months before being purged from those as well.

5. Your Rights and Choices

You can:

• View and edit your profile information through your account

settings.

• Turn off email notifications through your profile settings (some

transactional emails like payment receipts cannot be turned off).

• Request a copy of your data or request deletion by contacting

support@mahjmuddle.com. We respond within 30 days.

If you are a California resident, you have additional rights under the CCPA including the right to know what personal information we collect about you and the right to request deletion. Contact us at support@mahjmuddle.com to exercise these rights.

6. Children

Mahj Muddle is intended for users 18 and older. We do not knowingly collect information from anyone under 18. If we discover we have collected information from someone under 18, we will delete it.

7. Security

We use reasonable security measures including hashed passwords, HTTPS encryption, and access controls. No system is perfectly secure; we cannot guarantee absolute protection. Notify us immediately at support@mahjmuddle.com if you suspect a security incident affecting your account.

8. Changes to This Policy

We may update this Privacy Policy. For material changes we will give you at least 30 days' notice through the Service or by email. Continued use of the Service after the effective date constitutes acceptance.

9. Contact

support@mahjmuddle.com 31 Rockwall Dr., Longview, TX 75604-3525