Privacy Policy

Last updated October 22, 2026

This policy explains what information the Mexican Train game (at mex-train.app) and this website (mex-train.com) collect, and what we do with it. The game is run by Rizzo Enterprises, a sole proprietorship in Oregon. The short version: players don't have accounts, there are no ads and no tracking, and game rooms are deleted after a week unused. Only hosts who buy a Host Pass sign in, with an email address.

What we collect when you play

• Your display name, the name you type to join. Other players in your room see it.
• The game itself: the room code, who is seated where, the tiles and moves, the scores and the room's settings.

This is kept only on our game server, in the room, so the game can run. A room and everything in it is deleted automatically 7 days after it was last used, so a game can be picked up again within the week. Each player's device only ever receives its own tiles and the public table, never anyone else's hand.

We don't ask for your real name, email address, age, location or contacts to play, and we suggest not using your full name as your display name.

If you buy a Host Pass

• Your email address, which you sign in with. We email you a sign-in code; we never ask for a password.
• Your pass: which plan you have, when it renews or ends, and the reference numbers Stripe gives your customer record and subscription.
• Payment details go to Stripe, not to us: we never see or store your card number. Stripe also uses your billing address to work out sales tax.

We use this only to sign you in, give you the pass you paid for, and handle billing questions. It's kept while you have an account. Delete my account (in Host Pass) deletes it from our systems and cancels any subscription. Stripe keeps records of past payments as the law requires.

What's stored on your device

The game saves a few things in your web browser's local storage, on your own device. They are not cookies, and they're never used to track you:

• a random code that lets you back into your seat if your connection drops,
• the last room code and the name you used, to fill them in for you next time,
• your settings on that device (such as pip colors) and how you arranged your tiles.

If you sign in for a Host Pass, one cookie keeps you signed in on that device, for up to 180 days or until you sign out. It's used for nothing else.

You can remove all of these at any time by clearing the game's site data in your browser.

Feedback you send us

If you use the feedback form or email us, we keep what you send: your message, your email address if you give one, and the room code and device details if you include them. We use it only to fix problems, improve the game and reply to you. We delete it when it's no longer needed, and you can ask us to delete it sooner.

Information our providers handle

• Cloudflare hosts the game and this website. Like any web server, it processes technical information such as your IP address and browser type to deliver pages and protect against attacks. See Cloudflare's privacy policy. Cloudflare also forwards email sent to our support address.
• Stripe handles Host Pass payments and sales tax. See Stripe's privacy policy.
• Resend sends sign-in emails for us. See Resend's privacy policy.

What we don't do

• No advertising, and no advertising or analytics trackers.
• No selling or renting of personal information, and no sharing it for advertising.
• No accounts or profiles of players, and no marketing email.

We may disclose information if the law requires it, or to protect the game and its players from abuse.

Children

Mexican Train is a family game, and children may play with their family. We don't knowingly collect personal information from children under 13: playing needs only a display name, which is deleted with the room. Host Passes are sold only to adults. Parents: please help children pick a first name or nickname rather than their full name. If you think a child has sent us personal information through the feedback form or email, contact us and we'll delete it.

Security

The game and this website are only served over encrypted connections (HTTPS). Hidden game information never leaves the server except to the player it belongs to.

Your choices

• Use a nickname, and clear the site's data in your browser whenever you like.
• Delete your Host Pass account yourself, in Host Pass on your phone. Or ask us what we hold about you, or to delete it, at support@mex-train.com. Rooms delete themselves, so there's usually nothing else to find except feedback you sent.

Changes

If we change this policy, we'll update the date at the top, and for significant changes we'll post a notice on this website.

Contact

Rizzo Enterprises, Oregon, USA: support@mex-train.com