Last Updated: September 13, 2026
Mafia Game App ("we", "our", or "us") is a party game for teens and adults. This Privacy Policy explains what information the app handles, why, and who it is shared with.
The data controller for the purposes of the EU General Data Protection Regulation (GDPR) is the developer of Mafia Game App, a sole trader based in Luxembourg.
Contact: **tanvi.developeracc@gmail.com**
This app is intended for users aged 13 and over. It is not directed to children under 13, and we do not knowingly collect information from children under 13. Advertising in the app is limited to a Teen content rating.
- No account, no sign-up, no login.
- Player names are nicknames you choose — we never ask for your real identity.
- Your offline games themselves — names, roles, votes — are never sent anywhere.
- If you use Invite a Friend, the app uses a scrambled (one-way hashed) version of your device's Android ID to stop the same phone being rewarded twice. The original ID never leaves your phone.
- Bug reports you submit on our bug tracker are public, so don't include personal details.
- We do not sell your data, ever, and we use no analytics or tracking companies.
- Ads are served by Google AdMob. Purchases are processed by Google Play.
---
The following is saved only on your phone:
- Player names you type in
- Role setup, game state, and night results
- Saved player groups (your regular crew)
- Whether you have unlocked Premium
- Ad timing counters (games completed, when an ad was last shown)
- Progress toward roles you can earn by watching videos, roles you have earned and when they expire, and how many single-game video unlocks you have used recently
- Your invite status (for example, a friend's invite code waiting for your first finished game)
- Which announcements, polls, and policy notices you have already seen
- The last app version you saw
Most game data clears when you start a new game. Saved groups, Premium status, earned-role progress, and invite status persist until you uninstall the app or clear its data.
When the app opens, it downloads its current settings (for example, whether certain features are switched on, announcements, and the current time on our server) from Google Firebase Realtime Database, hosted in the European Union. Like any internet connection, this reveals your IP address to Google as the host. No personal information is sent with the request.
Only when you create or join an online room, the following is sent to Google Firebase Realtime Database:
- The 4-digit room code
- Player nicknames (limited to 20 characters, with special characters removed)
- A randomly generated player ID stored on your device (for example, `player_a1b2c3d4e`). This is created by the app, is not a hardware or advertising identifier, and is not linked to your identity. The app regularly replaces it with a new one.
- Game state during play: assigned roles, votes, night actions, and who is still alive
Rooms expire after 1 hour of inactivity and are deleted automatically thereafter. There is no account, no match history, and no lasting profile.
Occasionally the app may ask a short, optional multiple-choice question (for example, whether you use Online mode). If you answer, your chosen answer, the time, and the random player ID described above are stored in Firebase. Answers are not visible to other users and are kept only as long as needed to review the results, and no longer than 12 months.
If you share an invite link or enter a friend's invite code, the following is used:
- A scrambled device identifier. The app takes your device's Android ID and turns it into a one-way hash (SHA-256). The hash cannot be turned back into the original Android ID, and the original ID never leaves your phone. We never use it for advertising or tracking.
- Your invite code, stored in Firebase together with that hashed identifier, so rewards reach the right phone.
- If you joined through an invite. a record of which invite code you used, the inviter's hashed identifier, and the time you completed your first game.
- If you invited someone: records of the friends who joined (their hashed identifiers and the dates they joined), so the app can show how many friends you've invited and apply your reward.
- Google Play install referrer. On a new install, the app reads the Google Play install referrer — information about the link you installed the app from — only to find an invite code in it.
We use this to give you and your friend your rewards and to prevent the same phone from being rewarded more than once. Your invite code is only shared with the people you choose to send it to. These records are kept for as long as the invite programme runs (they are what stops a phone claiming a reward twice) and are deleted when the programme ends.
The app displays advertising provided by Google AdMob (banners, full-screen ads between games, and optional rewarded videos you choose to watch — for example, to unlock a role for one game or to earn a role for 30 days).
To serve ads, Google may collect and process:
- Your device's Advertising ID
- IP address, device type, and app information
- Ad interactions (views, clicks)
If you are in the European Economic Area, the United Kingdom, or certain US states, the app shows a consent form before any ads load, and your choice is respected. You can change your choice later from the link on the Home screen. Ads are configured with a maximum content rating of Teen, and the app is declared not child-directed.
How Google uses this data: https://policies.google.com/technologies/partner-sites
Premium removes all ads.
Mafia Game App offers a one-time Premium unlock (removes ads, adds extra roles and unlimited saved groups).
- Payment is processed entirely by Google Play. We never see or store your card details.
- RevenueCat verifies the purchase and stores a pseudonymous app user ID and purchase receipt so your unlock can be restored.
- If you use a promotional redeem code, it is checked against a list in Firebase and then marked as used, together with the time and the random player ID described above.
If you tap the "Better" or "Worse" feedback button after an update, the app sends only your rating and the app version number to a private Google Sheet. No name, no ID, nothing that identifies you or your device. Answering is entirely optional.
When the app opens, it fetches the public Google Play listing page to compare version numbers and tell you if an update is available. This is an ordinary web request and sends no personal information.
The "Report Bug" button opens our bug tracker web page (https://mafia-game-app--bugs.expo.app). If you submit a report or feature request, we store what you enter — the summary, description, type, severity, area, and, only if you choose to add them, a name and your device model — in Google Firebase, together with the time you submitted it. The page is hosted by Expo (EAS Hosting).
Reports are publicly visible on the tracker's Board, so please do not include personal information such as your email address or full name. We may edit or delete reports, and we delete reports when they are no longer useful.
- Real names or identity information (unless you choose to type them into a bug report)
- Email addresses, phone numbers, or postal addresses
- Photos, videos, or microphone recordings — the app never records audio
- Precise or approximate location
- Contacts
- Browsing history outside the app
- Payment card details
- Your device's Android ID in readable form (only the one-way hash described under Invite a Friend)
*(Note: Google AdMob uses your device's Advertising ID for ad serving, as described in the Advertising section above.)*
We do not sell your data, and we do not use analytics or tracking companies.
Information is shared only with the service providers needed to run the app:
| Provider | Purpose |
|---|---|
| Google Firebase | App settings, online multiplayer rooms, polls, redeem codes, invites, bug reports |
| Google AdMob | Advertising |
| Google Play | App distribution, purchase processing, install referrer |
| RevenueCat | Purchase verification and restore |
| Expo (EAS Hosting) | Hosting the bug tracker web page |
In online multiplayer, your chosen nickname is visible to other players in the same room. Only people you give the room code to can join. Bug reports are visible to anyone who visits the bug tracker.
Where the GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Storing game data on your own device | Performance of a contract (Art. 6(1)(b)) |
| Downloading app settings | Legitimate interests in operating and updating the app (Art. 6(1)(f)) |
| Running an online multiplayer game you joined | Performance of a contract (Art. 6(1)(b)) |
| Answering an in-app poll | Your consent (Art. 6(1)(a)) — answering is optional |
| Invite a Friend rewards | Performance of a contract (Art. 6(1)(b)) |
| Preventing invite rewards being claimed twice | Legitimate interests in preventing fraud (Art. 6(1)(f)) |
| Personalised advertising | Your consent (Art. 6(1)(a)) |
| Non-personalised advertising | Legitimate interests in funding a free app (Art. 6(1)(f)) |
| Earning roles by watching optional videos | Performance of a contract (Art. 6(1)(b)) |
| Processing a Premium purchase or redeem code | Performance of a contract (Art. 6(1)(b)) |
| Bug reports and feature requests | Your consent (Art. 6(1)(a)) — submitting is optional |
| Anonymous "Better / Worse" feedback | Your consent (Art. 6(1)(a)) — answering is optional |
Our service providers (Google, RevenueCat, and Expo) may process data outside the European Economic Area, including in the United States. Where they do, transfers are made under the European Commission's Standard Contractual Clauses or an adequacy decision.
If you are in the European Union or the United Kingdom, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing, including objecting to advertising or fraud prevention based on legitimate interests
- Data portability
- Withdraw consent at any time, without affecting processing carried out before withdrawal
In practice, this app holds very little: it has no account system, and the nickname you type is not linked to your identity. Uninstalling the app deletes all local data, and online rooms delete themselves.
To exercise any right, email tanvi.developeracc@gmail.com. Because we have no accounts, we can't look you up by name: to ask about invite records, include your invite code (shown on the Premium screen); to ask about a bug report, include its title.
You also have the right to lodge a complaint with a supervisory authority. In Luxembourg this is the Commission nationale pour la protection des données (CNPD), https://cnpd.public.lu. You may also complain to the authority in your own country of residence.
- On-device game data — until you start a new game
- Saved groups, Premium status, earned-role progress, and invite status on your device — until you uninstall the app or clear its data
- Online room data — expires after 1 hour of inactivity, then deleted
- Poll answers — until the results have been reviewed, and no longer than 12 months
- Invite records — for as long as the invite programme runs, then deleted
- Used redeem codes — for as long as the code list is kept
- Bug reports and feature requests — until they are no longer useful, then deleted
- Anonymous feedback — retained without any identifying information
- Play offline. Local pass-and-play works without an internet connection, and your games themselves are never sent anywhere.
- Skip the optional features. Polls, invites, rewarded videos, and bug reports are all voluntary.
- Change your ad consent from the link on the Home screen (where the consent form applies to you).
- Reset or delete your Advertising ID in your Android settings (Settings → Privacy → Ads).
- Buy Premium to remove all advertising.
- Delete everything on your phone by uninstalling the app.
This app is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, please contact us and we will delete it.
We may update this policy from time to time. Changes are indicated by the "Last Updated" date at the top, and where changes are material we show a notice in the app.
Questions about privacy: **tanvi.developeracc@gmail.com**
Bug reports and feature requests: https://mafia-game-app--bugs.expo.app