Privacy Policy

Effective: August 1, 2025•Updated: August 1, 2025

Rawi Studios ("we", "us", "our") operates MafiaDeck and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using MafiaDeck, you consent to the data practices described in this policy.

1. Data Controller

Rawi Studios is the data controller responsible for your personal data.
Contact: support@rawistudios.com
Website: https://mafiadeck.com

2. Information We Collect

Information You Provide:

  • Account Information: Username, email address, password (encrypted)
  • Profile Information: Display name, avatar selection, game preferences
  • User Content: Chat messages, game actions, player notes
  • Support Communications: Inquiries, feedback, bug reports

Information Collected Automatically:

  • Device Information: Device type, operating system, browser type and version
  • Usage Data: Game statistics, session duration, feature usage, performance data
  • Network Information: IP address, approximate location (country/region level)
  • Cookies and Similar Technologies: Session cookies, local storage for preferences

Game-Specific Data:

  • Game history and statistics
  • Win/loss records
  • In-game actions and decisions
  • Player interactions and voting patterns

3. How We Use Your Information

We use collected information to:

  • Provide Services: Create accounts, facilitate gameplay, manage game sessions
  • Improve Experience: Analyze usage patterns, optimize performance, develop new features
  • Communications: Send game notifications, updates, and support responses
  • Safety & Security: Detect cheating, prevent fraud, enforce Terms of Service
  • Legal Compliance: Meet legal obligations and respond to legal requests
  • Analytics: Understand user behavior and improve game balance

4. Legal Basis for Processing (GDPR)

We process your data based on:

  • Contract: To provide the Service you requested
  • Legitimate Interests: To improve our Service and ensure security
  • Consent: For optional features and marketing (where applicable)
  • Legal Obligations: To comply with applicable laws

5. Third-Party Services

We use the following third-party services that may process your data:

  • Firebase (Google): Authentication, database, hosting, analytics
    Firebase Privacy Policy
  • Discord (Optional): Voice chat integration
    Discord Privacy Policy

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

6. Data Retention

  • Account Data: Retained until account deletion request
  • Game History: 90 days for detailed logs, aggregated stats indefinitely
  • Chat Messages: 30 days
  • Support Tickets: 2 years
  • Analytics Data: 26 months

After deletion, some anonymized data may be retained for statistical analysis and service improvement.

7. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encrypted password storage
  • Regular security audits
  • Access controls and authentication
  • Firestore security rules

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. By using our Service, you consent to such transfers.

9. Your Rights

Under GDPR (European Users):

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion ("right to be forgotten")
  • Restriction: Limit processing of your data
  • Portability: Receive your data in a portable format
  • Object: Object to certain processing
  • Withdraw Consent: Where processing is based on consent

Under CCPA (California Users):

  • Right to know what information is collected
  • Right to delete personal information
  • Right to opt-out of sale (we do not sell data)
  • Right to non-discrimination

To exercise these rights, contact us at support@rawistudios.com

10. Children's Privacy

Our Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children below these ages. If we discover such data, we will delete it immediately. Parents who believe their child has provided us information should contact us.

11. Cookies and Tracking

We use:

  • Essential Cookies: Required for authentication and core functionality
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Help us understand usage patterns (Firebase Analytics)

You can control cookies through your browser settings, but disabling essential cookies may limit functionality.

12. Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify affected users within 72 hours via email and provide information about the breach and recommended actions.

13. Marketing Communications

We may send service-related emails (account verification, game notifications). Marketing emails are only sent with your consent and you can opt-out at any time via the unsubscribe link or by contacting us.

14. Do Not Track

Our Service does not currently respond to "Do Not Track" browser signals. However, you can control tracking through cookie settings and by opting out of analytics.

15. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or prominent notice on the Service at least 30 days before the changes take effect. Your continued use after changes constitutes acceptance.

16. Supervisory Authority

EU users have the right to lodge a complaint with their local data protection authority if they believe their rights have been violated.

17. Contact Information

For privacy-related questions, requests, or complaints:

Rawi Studios
Email: support@rawistudios.com
Website: https://mafiadeck.com

Response time: We aim to respond to all privacy requests within 30 days.