Privacy Policy
Muushig (Муушиг) is a free online multiplayer card game based on the traditional Mongolian game of the same name. It is playable in a web browser at muushig.fly.dev and as a Discord Activity. The game is operated by an independent developer (“we”, “us”). This policy explains what information the game collects, why, and what your choices are.
Questions or requests: tubulol12345@gmail.com.
1. Information we collect
Account information. You may sign in with Discord, Google, or Facebook (on the web) or through Discord when playing inside a Discord Activity. From the sign-in provider we receive and store:
- your provider user ID,
- your display name / username,
- your avatar image URL,
- the email address associated with the provider account (used only to identify your account — it is never displayed publicly, shared, or used for marketing).
Gameplay data. When signed-in players finish a game, we record match results: who played, final scores, placements, wins and losses, per-round history (tricks taken, stays and folds, special plays), win streaks, a skill rating, match duration, and timestamps.
Technical data. If the game hits an error, the app may send a short error report (error message, page, and browser version) to our server, rate-limited by IP address. Our hosting provider also keeps standard, short-lived server logs (IP addresses and requests) for operating and securing the service.
Playing as a guest. If you play without signing in, no account is created and no data is linked to you. Your chosen table name may appear in other players’ match histories and in anonymous per-round records, but these are not connected to any identity.
2. What we do not collect
- No advertising, no ad networks.
- No analytics or tracking SDKs, and no cross-site tracking.
- No selling or renting of personal information — to anyone, ever.
- No cookies beyond what is strictly needed to keep you signed in and reconnect you to a game in progress.
3. How we use information
- To run the game: seats, reconnection, match results, and profiles.
- To show statistics, ratings, and leaderboards.
- To keep the game fair and safe: rate limiting, a profanity filter on display names, and abuse prevention.
- To find and fix bugs via error reports and server logs.
We do not use your information for anything else.
4. Where your data lives (processors)
- Supabase — hosts the game database and sign-in (authentication) service.
- Fly.io — hosts the game server and keeps its operational logs.
- Discord — when you play inside Discord, your use of Discord itself is governed by Discord’s Privacy Policy. Likewise Google or Facebook when you choose them for sign-in.
5. Data retention and deletion
Your account, profile, and statistics are kept until you ask us to delete them. Server and error logs are short-lived and rotate automatically.
To delete your account, email tubulol12345@gmail.com from a way we can verify you own the account (or include your in-game name and sign-in provider). Deletion removes your profile, statistics, and match results, and anonymizes your per-round game records. We aim to complete deletion requests within 30 days.
6. Your rights
Depending on where you live (for example under the GDPR in the EU/EEA or the CCPA in California), you may have the right to:
- access a copy of the personal data we hold about you,
- correct inaccurate data,
- delete your data,
- receive your data in a portable format,
- object to or restrict certain processing,
- lodge a complaint with your local data-protection authority.
To exercise any of these, email tubulol12345@gmail.com. We will never discriminate against you for exercising your rights.
7. Children
The game is not directed at children under 13, and Discord requires its users to be at least 13 (older in some countries). We do not knowingly collect personal information from children under 13; if you believe a child has created an account, contact us and we will delete it.
8. Security
Game data is stored with row-level security so that only the game server can write match results; sign-in is handled by established OAuth providers; secrets are never shipped to the client. No online service can promise perfect security, but we collect little and expose less.
9. Changes to this policy
If we change this policy in a meaningful way (for example, if paid features launch), we will update the effective date above and note the change in the game. Continued use after a change means you accept the updated policy.