Privacy Policy

Who Is Mafia?

This policy

This policy covers the Who Is Mafia? app and the join server at who-is-mafia.kotinarupali.workers.dev. It was last updated on October 21, 2026.

Pass the phone

Pass the phone is the default. Names and roles stay in memory on that iPhone. They are not uploaded and they are not saved after the app closes. Quitting the app clears them.

Join code

If the host chooses a QR join code, that iPhone sends each player's name and secret role to the game server. The server uses them only to show the join page and to give a player who taps their own name that one role. Anyone with the link can tap a name that has not been taken yet. Names and roles are not sold, not used for advertising, and not sent to an AI service.

The host agrees to that send by choosing QR code. Choosing Pass the phone sends nothing. The host withdraws that choice by tapping End Game or New Game, which deletes the names and roles from the server.

How long

The server deletes names and roles when the host starts a new game or ends the game, when the host phone stops checking in for 2 minutes, or 3 hours after the round starts, whichever comes first.

To ask for deletion sooner, email kotinarupali@gmail.com. Include the join link, or the approximate time and the player names. A live session is deleted when that request arrives. If the session has already ended, the names and roles are already gone. Quitting the app deletes the copy on the phone.

IP address

When a join session is created, the server records the host phone's IP address and the time, only to limit a network to 8 new sessions in 10 minutes. That address is kept apart from player names and roles. It is not used to identify a person, advertise, or track anyone across apps or websites. Create times older than 10 minutes are dropped from the record the next time that network creates a session.

Cloudflare

The join server is hosted by Cloudflare, Inc. Cloudflare processes the names, roles, and rate-limit record only to run this service. Cloudflare provides the same or equal protection of that data as this policy describes. The data is not shared with anyone else. The app includes no analytics or advertising service.

Data the app does not collect

The app does not collect an account, email address, precise location, contacts, photos, or advertising identifier. It does not track you across other apps or websites.

Children

Who Is Mafia? is not directed to children under 13, and it does not ask anyone's age. If you believe a child under 13 used a join code, email kotinarupali@gmail.com and that session will be deleted.

Contact

For a privacy question, a deletion request, or to withdraw consent for a join session, email kotinarupali@gmail.com.