Privacy Policy

Mafia — mafia.cool, published by Roundlly

Last updated: 23 October 2026

Mafia is a party game you play with friends, each on your own phone — in the same room, or online over a video call. This policy explains what we collect, why, and how to get rid of it. If anything here is unclear, email support@roundlly.com.

The short version

No advertising and no cookies. We count visits anonymously, and never track you across other websites.
We never sell or rent your data, to anyone, for any purpose.
We only collect what the game needs to work.
You can delete your account and its data at any time, from inside the app.

1. Who is responsible for your data

Mafia is published by Roundlly, the independent developer of the app, reachable at support@roundlly.com. Roundlly is the data controller for the information described here.

2. What we collect and why

WhatWhy
Your email address and name from Google or Apple (whichever you sign in with), and that service's account identifier — or, if you sign in with email, just the email address you type in Signing in. Mafia has no password of its own — Google or Apple confirms it is you, or, if you sign in with email, a one-time code we email you does. If you choose to hide your email with Apple, Apple gives us a private relay address instead of your real one.
Only if you sign in with Apple on iPhone: a sign-in token from Apple So that when you delete your account we can tell Apple to disconnect Mafia from your Apple ID. It is kept on our server only, never shown to anyone, and removed when you delete your account.
Your username, display name and avatar So other players can recognise you in the lobby and in a game.
Only if you host a public online lobby: your display name and avatar, shown in the list of open lobbies So other signed-in players can find and join your game. Private lobbies are never listed.
Only in online games: your camera picture and your voice, live So the other players in that game can see and hear you. They are passed live between players and are never recorded or stored — see section 4.
Your friends, and friend requests and game invites you send or receive Inviting people to play.
People you block or decline Making sure they cannot contact you again.
Reports you make about other players, and reports about you (a report made in an online game also notes which room it happened in) Keeping the game safe and dealing with abuse.
Only if you play online: that you agreed to the online rules and said you are 18 or older, and when So we only ask once, and can show the rules were accepted. Deleted with your account.
Feedback you post, and your votes on other people's feedback Running the in-app feedback board.
Which game room you are sitting in, and your seat — and in online games, your votes and secret night choices Running the game itself. This is deleted automatically once a room goes idle.
The date you created your account, the last time you opened Mafia, and whether you play in the iPhone app, the Android app or the website (the first one you used, and the latest) Knowing whether an account is still in use, how many people are actually playing, and how many play on each. It is a single date that gets overwritten — not a history of your sessions.
Only if you turn on invite notifications in the app: a notification address for each of your phones (issued by Google), whether it is Android or iPhone, and the app's language Showing a notification when a friend invites you to a game, even when Mafia is closed, in your language. We also note when each invite notification was sent, only to limit how many one person can receive — those notes are deleted after a day.
Your theme and language choice Kept only on your own phone, so the app looks the way you left it.

Our legal basis is performing the service you asked for (running the game and your account) and our legitimate interest in keeping players safe from abuse.

3. What we do not do

We do count how many people visit the site, using a privacy-friendly counter that sets no cookies and cannot identify you. We would rather tell you about it plainly than hide it — section 5 says exactly what it records.

4. Camera and microphone

Mafia uses your camera and microphone only when you choose to, and only in two places:

Neither we nor LiveKit record or store your picture or voice. As with any video call, another player could still record their own screen, so only show what you are comfortable sharing. Face-to-face games never use the microphone, and use the camera only for QR scanning.

5. Who else handles your data

We use a small number of service providers to run the app. They process data on our instructions and are not permitted to use it for their own purposes.

The visitor counter. We use Vercel Web Analytics to see how many people open the site. For each page opened it records the page address, the site you came from, your approximate area (country, region and city), and your browser, operating system and device type.

It sets no cookies, does not store your IP address, and cannot follow you to any other website. Visitors are told apart only by a temporary code that is thrown away after 24 hours. That means we can see how many people visit — never who they are, and never what any one person did.

This runs on the website only. The Android and iPhone apps do not count you at all.

6. Where your data is stored

Your account and game data are held in a database hosted by Supabase in Northern Virginia, United States. The website and app are delivered by Vercel's global network, which serves pages from whichever location is nearest to you.

Supabase, Vercel, Resend and LiveKit are all companies based in the United States. This means your data is stored and processed outside your own country, under the contractual data-protection safeguards these providers offer. If we move to a different region we will update this policy.

In online games, your live picture and voice travel through whichever LiveKit server is closest to the players, which can be in another country. They pass through without being stored.

7. How long we keep it

8. Deleting your account

Open Mafia, go to Profile, scroll down and tap Delete my account. It is immediate and permanent. If you signed in with Apple, this also disconnects Mafia from your Apple ID. Full instructions, including what to do if you cannot get into the app, are at mafia.cool/delete-account.

9. Your rights

You can ask us to give you a copy of your data, correct it, delete it, or restrict or object to how we use it. Email support@roundlly.com and we will respond within 30 days. If you are unhappy with our response, you can complain to your local data protection authority — in Turkey that is the KVKK authority (KVKK Kurumu), and in the EU or UK it is your national supervisory authority.

10. Children

Mafia is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has given us their data, email support@roundlly.com and we will delete it.

11. Cookies and local storage

We do not use tracking or advertising cookies. The app stores a few things on your own device so it works: your sign-in token, your theme and language choice, your notification choice, a cached copy of your profile, and flags for tips you have already seen. These are needed for the app to function and are cleared when you sign out or delete your account.

12. Changes to this policy

If we change this policy we will update the date at the top, and for anything significant we will tell you in the app.

13. Contact

Roundlly — support@roundlly.com