Privacy
Privacy
Last updated Oct 18, 2026
Guest play stays in this browser. If you create an account, we keep your display name, email, and skill band so your progress can travel. We do not sell your information.
Daily Challenge scores you choose to post appear on the public board with the name you pick. Questions: [email protected].
First-party analytics
NowMahj measures its own site and practice app so a weekly review can explain what changed: who visited, what brought them in, where they went, and whether they joined the waitlist or started practice. The script is ours. There is no third-party tracker.
We store a random anonymous id and a session id on this device. With each visit we store the page, the event name, a coarse device type (mobile, tablet, or desktop), and the country Cloudflare already attaches to the request. We store first-touch and last-touch attribution: source, medium, campaign, content, term, the referrer’s domain, the landing path, and a partner ref code. Ad click ids such as fbclid, ttclid, and gclid are recorded only as present or absent. We do not store the id itself.
We do not store your IP address or your full user agent. The waitlist keeps your email in a separate list. The analytics database stores a hash that links the anonymous id to that signup. It does not store the email.
A short link such as /r/jane sends you to the site with that ref code. Unless your browser sends Do Not Track or Global Privacy Control, that link also sets a first-party cookie for 30 days so a later visit can keep the partner credit.
Do Not Track and Global Privacy Control turn collection off. The notice on the page, “We use first-party analytics to improve NowMahj,” lets you opt out. That choice stays in local storage on this device.
We use the counts for the weekly review: visitors, sessions, waitlist signups, practice starts, and the change by channel, post, partner, landing page, and device. Annotations record posts, deploys, and emails so a change in the numbers can be matched to something we did.