Mashy · Legal
Privacy Policy
Mashy collects as little as it can. This page explains what we keep, why, and what you can ask us to do with it.
Who we are
Mashy is run by Obox, who is responsible for your data. Questions or requests go to hi@playmashy.com.
What we collect
- Your email address, when you sign up or log in. We also store a one-way hash of it as your player id.
- Your game data: scores, round cards, daily results, settings, the gear you've equipped, coins, purchases and friends. Your player name (the part of your email before the @) and your public card (best scores and outfit) are shown on boards and to friends.
- Your country, worked out from your connection, to decide whether to show the cookie banner and to tell us where new players come from.
- Emails you invite: if you invite a friend by email, we store their address with the invite and send it once.
- On your device: guests' progress and settings stay in your browser's local storage, plus a login cookie (30 days) once you sign up.
Why we use it
- To log you in, save your progress across devices, and run boards, the Clubhouse and the Pro Shop.
- To process purchases and send receipts.
- To send update emails about Mashy: game news, new courses, features and offers. You agree to these when you sign up, and you can unsubscribe at any time with the link in any update email or by writing to hi@playmashy.com.
- To keep the game fair and secure, for example by limiting login attempts and checking for bots.
- To see how the game is used and how well our ads work (see below).
Analytics, ads and cookies
On playmashy.com we use Google Analytics and the Meta Pixel to count visits and key steps (like finishing a hole or signing up). When you sign up with tracking allowed, we may also send Meta a hashed (scrambled) copy of your email so it can measure our ads.
In the EEA, the UK, Switzerland and Canada we ask first: analytics and ad cookies stay off until you choose, and if you decline, no ad events are sent. Login uses Cloudflare Turnstile to check for bots.
Who helps us
- Cloudflare: hosting, storage, bot checks and sending email.
- Polar: payments (they handle your card details; we never see them).
- Google and Meta: analytics and ad measurement, as described above.
We don't sell your data. These providers may process it outside your country, under their own safeguards.
How long we keep it
- Your account and game data stay for as long as you have an account.
- Login sessions last 30 days, invites 30 days and daily boards 48 hours.
- When you ask us to delete your account, we remove it within 30 days. We keep purchase records only as long as tax and accounting rules require.
Your choices and rights
You can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it or unsubscribe from update emails at any time. Email hi@playmashy.com and we'll reply within 30 days. You can also complain to the data protection authority where you live.
Changes
If we change this policy, we'll update the date at the top, and for big changes we'll tell you in the game or by email. The Terms of Use cover the rest.