Privacy Policy

Who is responsible

Privacy questions and requests concerning Mafia - Role game or its website can be sent to korodipio@gmail.com.

Information stored on your device

The app stores the information needed to run and resume games locally. We cannot view this information remotely.

• Optional player names or nicknames, assigned roles, game actions, votes, results, ratings and game history.
• Game settings, language, theme and tutorial preferences.
• Local purchase status needed to unlock subscription features.

Information processed by services

• Purchases: Apple or Google and RevenueCat process an anonymous app identifier, product and transaction identifiers, purchase and subscription history, entitlement status, country, currency and limited device information needed to offer, verify and restore Mafia Pass. We do not receive your payment-card details.
• Accounts: if you register or sign in, Firebase Authentication processes your email address or sign-in-provider identifier, a user ID and login/security metadata. We do not receive passwords that you enter with Apple, Google or another identity provider.
• Online games: when you create or join an online session, Firebase processes the session code, nickname, game settings and state, participant actions, timestamps and connection information needed to synchronise the game and provide support.
• Diagnostics and product telemetry: Firebase and PostHog may process a random installation or session identifier, app version, platform, language, screen and feature events, performance, crash and error details. These identifiers are pseudonymous and are not linked to an account unless you expressly allow that link.
• Advertising: when ads are available in your version, Google Mobile Ads may process advertising or app identifiers, IP address, approximate location derived from IP, device information and ad interactions. Personalised advertising and tracking are not enabled without your explicit choice where consent is required.
• Support: if you contact us, we receive your email address, message and any files you choose to send.
• Website: Google Firebase Hosting may process standard request data such as IP address, device or browser information, requested page and time for delivery, reliability and security.

Privacy choices and limits

• Offline player names, roles and game history are not uploaded unless you choose an online feature or send them for support.
• Optional product analytics, account-linked telemetry, personalised advertising and cross-app tracking require an explicit choice where they are offered.
• Essential security, fraud-prevention, subscription and crash information may be processed in pseudonymous form when necessary to provide and protect the service.
• The website does not use analytics or advertising cookies.
• We do not sell personal information.

Purposes and legal bases

We process account, online-session and purchase information to provide the features or perform the contract you request; support, security and essential diagnostics for our legitimate interest in answering requests and keeping the service reliable; and records needed to comply with law. Optional analytics, account linking, personalised ads and tracking rely on your consent where required. You may withdraw consent at any time without affecting earlier lawful processing.

Sharing and international processing

Information is shared only as needed with Apple or Google for sign-in and store purchases, RevenueCat for subscriptions, Google Firebase for authentication, online sessions, hosting and diagnostics, PostHog for configured telemetry, Google Mobile Ads for ads, our email provider when you contact us, other participants in an online game as required by that game, and public authorities when legally required. Providers may process information in other countries under their safeguards and privacy terms.

Retention and deletion

• Local game data remains until you delete a game, clear app data or uninstall the app.
• Account information remains while the account is active. After a valid deletion request, data controlled by us is deleted or de-identified within 30 days, with protected backups removed within 90 days unless law, security or a dispute requires longer retention.
• Online-session content is normally deleted or de-identified within 90 days after the session ends. Security logs may be kept for up to 12 months.
• Raw pseudonymous telemetry is kept for up to 12 months; aggregated statistics that no longer identify a user or device may be kept longer.
• Store and subscription records are kept by Apple, Google and RevenueCat under their retention rules and legal obligations.
• Ordinary support correspondence is deleted or anonymised within 24 months after the last contact unless it is needed longer for security, a dispute or a legal duty.
• You can request account or data deletion at korodipio@gmail.com and, where available, through the app's privacy or account controls. Removing the app does not cancel a subscription or erase records that a store must retain.

Security

We limit collection and use reasonable safeguards. No storage or transmission method is completely secure, so do not enter unnecessary personal details. Nicknames are recommended for players.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing, or withdraw consent. You may also complain to the Georgian Personal Data Protection Service or the competent authority where you live. We may need to verify a request before acting on it.

Children

The app is not designed to collect information from children. A parent or guardian should supervise use where local law requires it. Avoid entering a child's full name and do not send a child's personal information in a support request unless necessary and lawful.

Changes and contact

We may update this policy when the app, providers or legal requirements change. The new date will appear at the top. Questions and privacy requests can be sent to korodipio@gmail.com.