Privacy policy

What we store

• Account: username, email, optional mobile number, password hash; if you use Google, your name and profile picture.
• Orders: products, player IDs you enter, delivery details.
• Payments: amount, currency, time and payment reference. We never see your bank or wallet login, card or account number.
• Security: sign-in times, IP address and browser for your sign-in history.

Devices and fair use of rewards

When you're signed in, we keep a random device ID in a cookie on your browser and record, in a scrambled form we can't turn back into the original, that ID, your IP address and your browser type. We use this only to keep accounts secure and to make sure Mao Points rewards go to one account per person.

Sign in with Google

If you choose Google, we receive only your name, email address and profile picture, plus Google's ID for your account so we recognise you next time. We never see your Google password and get no access to your contacts, files or other Google data. Your picture is copied to our own server and shown only to you in your account. You can disconnect Google any time in Settings once you have set a password.

Payments and refunds

QR payments are made through Fonepay. Card payments, where offered, are made through Dodo Payments: we send it your email address, your name and the amount, and you enter your card or payment details and billing address on its checkout page, where Dodo Payments handles them under its own privacy policy. We keep the amount and payment reference to process your payment. Money loaded into your Mao wallet is non-refundable and cannot be withdrawn; see the wallet terms.

Retention and contact

[Owner to confirm: retention periods, who can access data, and how to request deletion.]