Mafia — Party Game
This Privacy Policy explains how the Mafia mobile application
(the “App”) handles information when you use it. The App is a social-deduction
party game for 6–15 players, available on the Apple App Store and Google Play Store
(application identifier com.amandeep.mafia.app).
The App is provided by Amandeep Bhardwaj (“we”, “us”, “our”). If you have any questions about this policy or your data, contact us at amandeep09bhardwaj@gmail.com.
Mafia does not require you to create an account. There is no sign-up, no password, and no email or social login. When you open a game, the App signs in anonymously to our backend to obtain a temporary, randomly generated session identifier so that your device can join the correct game room. This identifier is not tied to your real-world identity.
To run a multiplayer game session, the App handles the following limited information:
| Data | What it is | Why |
|---|---|---|
| Display name | A name you type when joining a room (up to 24 characters) | So other players can see who is who during the game |
| Anonymous session ID | A random identifier created per session via anonymous authentication | To join you to the right room and route your actions |
| Avatar index | A number (0–15) selecting an avatar color | Visual identification in the lobby |
| Room code | A short code identifying a game room | To group players into the same session |
| Game state | Your assigned role, votes, night actions, and round results | To run the game logic and show outcomes |
| Usage analytics | Anonymous events (e.g. a game started, a phase changed, a purchase completed) and coarse counts, tied to the anonymous session ID — never your name, room code, or the targets of your votes/actions | To understand how the game is used and improve it |
| Crash reports | Diagnostic data if the App crashes (device model, OS version, and a stack trace) | To find and fix bugs |
| Purchase status | Whether you own the “Full Game” unlock, as reported by the App Store / Google Play | To unlock the content you purchased |
This information exists only while a game room is active and is associated with the room, not with a persistent user profile.
We do not collect or process any of the following:
We use the limited information described above to operate the game: to create and join rooms, assign and reveal roles, synchronize the lobby and game phases across devices, process votes and night actions, and determine outcomes. We additionally use anonymous usage analytics and crash reports to understand how the game is played, measure basic engagement, and diagnose and fix bugs. We do not use your information for advertising, profiling, or marketing, and our analytics are not used to track you across other apps or websites.
If you are in the European Economic Area or the United Kingdom, our legal basis for processing the information above is the performance of the service you request (running a game session you choose to play), and our legitimate interest in operating and securing the game. We do not rely on consent for advertising or profiling because we do not engage in those activities.
We do not sell, rent, or trade your information, and we do not share it for advertising. We use Google Firebase (Firebase Anonymous Authentication, Firebase Realtime Database, Cloud Functions, Firebase Analytics, Firebase Crashlytics, and Firebase App Check) as our backend and app infrastructure to host game sessions, synchronize game state in real time, measure anonymous usage, diagnose crashes, and verify that requests come from a genuine copy of the App. In this capacity Google acts as our service provider / data processor. Google’s handling of data is governed by its own privacy terms, available at https://firebase.google.com/support/privacy and https://policies.google.com/privacy. We may also disclose information if required to do so by law.
Game data is ephemeral. A game room and its associated data (names, session IDs, roles, votes, and results) exist only to run that session and are no longer needed once the game ends or the room becomes inactive. Because we do not maintain user accounts or persistent profiles, there is no long-term personal-data store to manage. If you would like us to remove data associated with a specific room, or have any deletion request, email amandeep09bhardwaj@gmail.com and we will act on it promptly.
The App is a general-audience party game and is not directed at children under 13 (or the minimum age required in your country, such as 16 in parts of the EEA). The App shows no behavioral advertising and performs no profiling of any user. We do not knowingly collect personal information from children. If you believe a child has provided information through the App, contact us and we will delete it. This policy is intended to be consistent with the U.S. Children’s Online Privacy Protection Act (COPPA) and the GDPR.
The App is offered worldwide. Our backend runs on Google’s global infrastructure
(primary region asia-southeast1), and information may be processed on servers
located outside your country. Where required, such transfers rely on the safeguards Google
provides for its services, including Standard Contractual Clauses. By using the App you
understand that the limited information described here may be processed in this way.
Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or restrict processing, and the right to object or lodge a complaint with a supervisory authority (EEA/UK). California residents have rights under the CCPA/CPRA, including the right to know and to delete; note that we do not sell or “share” personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. To exercise any right, email amandeep09bhardwaj@gmail.com. We will not discriminate against you for exercising your rights.
The game uses a server-authoritative design: game-deciding logic and secret data (such as player roles) are computed and stored on the server, and secret data is readable only by the player it belongs to. Communication with our backend uses encrypted connections (HTTPS). While no system can be guaranteed perfectly secure, we take reasonable measures to protect the limited information the App handles.
INTERNET and
ACCESS_NETWORK_STATE to connect to the multiplayer backend, and
VIBRATE for haptic feedback. None of these are used to identify or track you.We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
Questions or requests? Contact Amandeep Bhardwaj at amandeep09bhardwaj@gmail.com.