Privacy Policy

You can play without an account. To join a game you type a display name. That name, your role, and your votes live in the game room while it is open. A room is deleted when the host closes it, when everyone leaves, or after 12 hours with nobody connected.

Your device keeps a small token so you get your seat back if you lose connection, plus settings like sound and text size. These stay on your device.

We store:

• Your email address, and your Google account ID if you sign in with Google
• Your password, only as a one-way hash that cannot be read back
• Your display name and avatar
• Your stats: games played, wins, losses, and the roles you won with
• The characters and themes you unlocked, and which ones you equipped
• What you bought

Password reset codes we email you are stored as a hash and expire.

If you buy something in the app without signing in, we create an account for you that holds no personal information, so the purchase has an owner. Add an email later and everything moves over to it.

The narrator is generated speech. To create it we send the narration text to ElevenLabs, with OpenAI as a backup. That text can include the names players typed in. We save the generated audio on our server so repeated lines play instantly, and older audio is deleted automatically as new audio comes in.

If you buy Voice Clone and record or upload your voice, the recording goes to ElevenLabs to build your narrator voice. We do not keep the recording. We keep only the ID of the voice ElevenLabs creates, the name you gave it, and when you confirmed it is your voice or that you have permission to use it.

In the app, the microphone is used only while you record. You can remove the voice from your profile at any time. Deleting your account removes it from ElevenLabs too.

On our website, Stripe processes payments. In the iPhone and Android apps, Apple or Google processes them and sends us a signed record of what was bought. We never see or store your card or store account details. We keep a record of each purchase (the Stripe checkout reference or the store purchase ID) so we can restore purchases and help with support requests.

We use Resend to send password reset emails. We do not send newsletters or marketing email.

Only the services that run the game, and only what each one needs:

• Fly.io hosts our servers in Toronto, Canada
• ElevenLabs and OpenAI generate the narrator's voice
• Google handles Google sign-in, if you choose it
• Stripe processes payments on our website
• Apple and Google process purchases in the iPhone and Android apps
• Resend sends our emails

Some of these companies process data in the United States. We do not sell or rent your personal information, and we do not use advertising or analytics trackers. We share information with authorities only when the law requires it.

We set one cookie, to keep you signed in. It is not used for tracking. If you use Google sign-in, the Google button loads from Google and follows Google's privacy policy.

• Account data: until you delete your account
• Game rooms: until the room closes, at most 12 hours after the last player disconnects
• Narrator audio: deleted automatically as newer audio replaces it
• Server backups and logs kept by our host: a short time, then overwritten

You can see most of your data on your profile, and you can delete your account yourself at any time. To get a copy of your data, correct it, or ask a privacy question, email support@mafiamanor.com. We reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Accounts are for people 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has made an account, email us and we will delete it.

If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app before it applies.

14736605 Canada Inc., Toronto, Ontario, Canada. support@mafiamanor.com