Privacy Policy

Mafia — mafia.cool, published by Roundlly

Last updated: 26 September 2026

Mafia is a party game you play in the same room with friends, each on your own phone. This policy explains what we collect, why, and how to get rid of it. If anything here is unclear, email support@roundlly.com.

The short version

No advertising and no cookies. We count visits anonymously, and never track you across other websites.
We never sell or rent your data, to anyone, for any purpose.
We only collect what the game needs to work.
You can delete your account and its data at any time, from inside the app.

1. Who is responsible for your data

Mafia is published by Roundlly, the independent developer of the app, reachable at support@roundlly.com. Roundlly is the data controller for the information described here.

2. What we collect and why

WhatWhy
Your email address and name from Google or Apple (whichever you sign in with), and that service's account identifier — or, if you sign in with email, just the email address you type in Signing in. Mafia has no password of its own — Google or Apple confirms it is you, or, if you sign in with email, a one-time code we email you does. If you choose to hide your email with Apple, Apple gives us a private relay address instead of your real one.
Only if you sign in with Apple on iPhone: a sign-in token from Apple So that when you delete your account we can tell Apple to disconnect Mafia from your Apple ID. It is kept on our server only, never shown to anyone, and removed when you delete your account.
Your username, display name and avatar So other players can recognise you in the lobby and in a game.
Your friends, and friend requests and game invites you send or receive Inviting people to play.
People you block or decline Making sure they cannot contact you again.
Reports you make about other players, and reports about you Keeping the game safe and dealing with abuse.
Feedback you post, and your votes on other people's feedback Running the in-app feedback board.
Which game room you are sitting in, and your seat Running the game itself. This is deleted automatically once a room goes idle.
The date you created your account, and the last time you opened Mafia Knowing whether an account is still in use, and how many people are actually playing. It is a single date that gets overwritten — not a history of your sessions.
Only if you turn on invite notifications in the app: a notification address for each of your phones (issued by Google), whether it is Android or iPhone, and the app's language Showing a notification when a friend invites you to a game, even when Mafia is closed, in your language. We also note when each invite notification was sent, only to limit how many one person can receive — those notes are deleted after a day.
Your theme and language choice Kept only on your own phone, so the app looks the way you left it.

Our legal basis is performing the service you asked for (running the game and your account) and our legitimate interest in keeping players safe from abuse.

3. What we do not do

We do count how many people visit the site, using a privacy-friendly counter that sets no cookies and cannot identify you. We would rather tell you about it plainly than hide it — section 5 says exactly what it records.

4. Camera

You can join a game by scanning a friend's QR code. If you choose to do that, the app asks your phone for camera access and reads the code on your device. No image, photo or video is ever uploaded, stored or seen by us. You can always type the room code instead and never grant camera access at all.

5. Who else handles your data

We use a small number of service providers to run the app. They process data on our instructions and are not permitted to use it for their own purposes.

The visitor counter. We use Vercel Web Analytics to see how many people open the site. For each page opened it records the page address, the site you came from, your approximate area (country, region and city), and your browser, operating system and device type.

It sets no cookies, does not store your IP address, and cannot follow you to any other website. Visitors are told apart only by a temporary code that is thrown away after 24 hours. That means we can see how many people visit — never who they are, and never what any one person did.

This runs on the website only. The Android and iPhone apps do not count you at all.

6. Where your data is stored

Your account and game data are held in a database hosted by Supabase in Northern Virginia, United States. The website and app are delivered by Vercel's global network, which serves pages from whichever location is nearest to you.

Supabase, Vercel and Resend are all companies based in the United States. This means your data is stored and processed outside your own country, under the contractual data-protection safeguards these providers offer. If we move to a different region we will update this policy.

7. How long we keep it

8. Deleting your account

Open Mafia, go to Profile, scroll down and tap Delete my account. It is immediate and permanent. If you signed in with Apple, this also disconnects Mafia from your Apple ID. Full instructions, including what to do if you cannot get into the app, are at mafia.cool/delete-account.

9. Your rights

You can ask us to give you a copy of your data, correct it, delete it, or restrict or object to how we use it. Email support@roundlly.com and we will respond within 30 days. If you are unhappy with our response, you can complain to your local data protection authority — in Turkey that is the KVKK authority (KVKK Kurumu), and in the EU or UK it is your national supervisory authority.

10. Children

Mafia is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has given us their data, email support@roundlly.com and we will delete it.

11. Cookies and local storage

We do not use tracking or advertising cookies. The app stores a few things on your own device so it works: your sign-in token, your theme and language choice, your notification choice, a cached copy of your profile, and flags for tips you have already seen. These are needed for the app to function and are cleared when you sign out or delete your account.

12. Changes to this policy

If we change this policy we will update the date at the top, and for anything significant we will tell you in the app.

13. Contact

Roundlly — support@roundlly.com