Privacy Policy

Mafia Party (web, Android and iOS app) · Effective 26 October 2026

Who we are

Mafia Party is published by Creative Coders sp. z o.o., ul. Płk. Zoltána Baló 6 lok. 5, 02-793 Warszawa, Poland (KRS 0001271368, NIP 9512657914), the controller of the personal data described here. Contact: support@quorumwork.com.

The short version

• No accounts, no sign-up, no analytics of our own.
• The free mobile app can show ads from Google AdMob between games when Google's consent platform permits ad requests. Rooms with Mafia Pro have no ads. Google presents privacy choices where required.
• Your nickname is shown to the people in your room. Our server holds it with the room’s game data for the period described below.
• Subscriptions are handled by Google Play or the Apple App Store. We never see your payment details.

What we process and why

• Game data — your nickname, room code, your role and the choices you make during a game. Purpose: running the game you joined (Art. 6(1)(b) GDPR). It is kept only in the server's memory, never written to a database, and deleted at the latest 6 hours after everyone has left the room, or immediately when the server restarts.
• Technical connection data — your IP address and basic request information, processed by our hosting provider to deliver the service and protect it from abuse (Art. 6(1)(f) GDPR). Kept in short-lived server logs.
• Subscription verification — on Android, the app sends the Google Play purchase token to our server to check whether Mafia Pro is active. On iOS, it sends the Apple-signed transaction and transaction ID; our server verifies the signature and current subscription status with Apple. Purpose: supplying your subscription (Art. 6(1)(b) GDPR). We do not receive your name, email or payment details. Successful Android checks can be reused for up to 12 hours; the token cache remains in server memory until restart. Purchase proofs associated with a room remain in its memory until the room is removed. We do not write these proofs to a database. You manage or cancel the subscription in the store account used to buy it.
• Promo codes — a code you enter is checked against a list and not stored.

Stored on your device

The app keeps local copies of your nickname, chosen language, display preferences, the code and private session key of your current room (so you can reconnect) and, if you bought Pro, the purchase token or signed Apple transaction. Clearing the app’s data removes these local copies. Nicknames, room/session information and purchase proofs are also sent to our server for the purposes described above. Google’s consent SDK stores your ad choices on the device and communicates with Google to manage consent.

Ads (Google AdMob)

The free mobile app shows ads from Google AdMob: now and then a full-screen ad between games (never during a round, never after your first game of a session, at most once every five minutes) and, if the host chooses, a reward video that unlocks the Pro roles for one game. Rooms with Mafia Pro and Pro subscribers see no ads. The web version has no ads.

• Before enabling ads, the app asks Google’s User Messaging Platform (UMP) for your current consent status and presents a form where required, for example in the EEA, the UK and Switzerland. We request ads only if that updated status permits it. Refusing consent, an unavailable form or a failed consent check can leave ads unavailable.
• iOS: all ad requests are non-personalised. The app does not request Apple’s App Tracking Transparency (ATT) permission or access to the IDFA advertising identifier. Google can still process the other information described below.
• Android: ad personalisation follows your Google consent choices. Google may use the Android advertising ID when available; you can reset or delete it in your phone’s settings. Ads are requested only when UMP permits them.
• Google’s advertising and consent SDKs may process IP-derived approximate location, app- or vendor-scoped device identifiers, ad views and interactions, crash reports, and performance diagnostics for advertising, measurement, consent management and fraud prevention. Non-personalised ads still involve data processing. Legal basis: your consent where required (Art. 6(1)(a) GDPR), otherwise our legitimate interest in funding the free version (Art. 6(1)(f) GDPR).
• Open Ad privacy on the home screen or in the menu to revisit choices where Google makes the form available. These controls remain accessible to Pro subscribers, even when the ads SDK has not been started. The app checks the current requirement and refreshes consent after the form closes; previously loaded ads are discarded. Opening these controls as a Pro subscriber does not enable ads.

Learn more: How Google uses information from apps that use its services, Google Privacy Policy and Google Mobile Ads SDK data disclosure.

Voice

The narrator uses the text-to-speech engine built into your phone or browser. The text being read may be processed by that engine under the policy of your device or browser maker. We do not record audio and do not use the microphone.

Who processes data for us

• Render Services, Inc. — hosting, servers in Frankfurt, Germany (EU).
• Apple — App Store distribution and in-app purchases on iOS, under Apple’s privacy policy.
• Google — Google Play distribution and billing, and AdMob with its consent platform as described above, under Google's own privacy policy.
• OpenAI — in Pro rooms with the AI storyteller, we send the selected story language, randomly generated participant placeholders, fixed fictional methods and the model's fictional town text to OpenAI's API. We do not send player nicknames, room codes, session keys, purchase proofs, roles, votes or other game choices. Nicknames are inserted into the returned story only on our server; that personalised text is not sent back to OpenAI.

We do not sell the room or subscription-verification data we hold. Google’s processing and advertising partners are described in its privacy information linked above.

Children

Mafia Party is a social deduction party game for teenagers and adults and is not directed at children under 13.

Your rights

You have the right to access, rectify, erase or restrict the processing of your data, to object to it and to data portability. Because we keep game data only for the lifetime of a room and hold no account data, there is usually nothing left to retrieve once your game ends. Write to support@quorumwork.com with any request. You may also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl), or the authority in your country.

Changes

If this policy changes, the new version will be published at this address with a new effective date.