Privacy Policy

Effective: March 8, 2026

Mafia Born ("the Game", "we", "us") is a free browser-based game available at mafiaborn.com. This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account Information

Username -- chosen by you at registration. This is visible to other players.
Password -- stored as a salted, cryptographic hash (PBKDF2-SHA512). We never store or see your actual password.
Account timestamps -- when your account was created and when you last logged in.

Game Data (Cloud Saves)

Your full game progress -- including player stats, inventory, money, territories, missions, and all other gameplay state -- is stored on our servers when you save to the cloud.

Bug Reports & Suggestions

If you submit a bug report or suggestion, we store the report text, your player name, the report type, and your IP address.

IP Addresses

We temporarily process your IP address to enforce rate limits on login and registration (to prevent abuse). This data is held in memory only and is automatically discarded within 60 seconds.
IP addresses submitted with bug reports are stored persistently for abuse prevention.

Multiplayer Data

When playing online, certain game information is shared with other players in real time: your player name, level, reputation, current territory, crew/alliance membership, and chat messages you send.

Local Storage (Browser)

We store a session token, your username, and UI preferences (theme, mobile navigation settings, tutorial progress) in your browser's local storage. This data never leaves your device except for the session token used for authentication.

2. Information We Do NOT Collect

We do not collect your email address.
We do not use cookies.
We do not use any analytics services, tracking pixels, or advertising networks.
We do not collect payment or financial information.
We do not sell, rent, or share your data with any third parties.

3. How We Use Your Information

Account & authentication -- to let you log in and access your saved game across devices.
Cloud saves -- to store and restore your game progress.
Multiplayer -- to display your player in the online world and enable chat and cooperative gameplay.
Abuse prevention -- to rate-limit login attempts and identify misuse via IP addresses.
Bug fixes -- to review and act on submitted bug reports and suggestions.

4. Data Storage & Security

Account data and cloud saves are stored in a MongoDB database hosted on secure infrastructure.
Passwords are hashed with PBKDF2-SHA512 using a unique random salt per account. We cannot retrieve your password.
All connections between your browser and our servers are encrypted via HTTPS/WSS (TLS).
Session tokens expire after 7 days and are automatically cleaned up.

5. Data Retention

Your account and cloud save data is retained for as long as your account exists.
Bug reports are retained indefinitely for quality improvement.
Rate-limit data is discarded automatically within 60 seconds.

6. Your Rights

Delete your account -- you can permanently delete your account and all associated cloud save data at any time from the in-game account settings. This action is immediate and irreversible.
Access your data -- you can view your game data via cloud save/load at any time.
Request removal of bug reports -- contact us to request deletion of any bug reports you've submitted.

7. Children's Privacy

Mafia Born is not directed at children under the age of 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Game after changes constitutes acceptance of the updated policy.

9. Contact

For privacy questions or data requests, you can reach us through the in-game bug report system or by opening an issue on our GitHub repository.