Privacy

Who this is

Mafi is made and operated by Bitesites LLC. Questions about anything on this page go to support@bitesites.org, which is also the address on the contact page.

What we collect

Everything in this list is either something you typed or something the game cannot run without.

• An account identifier. A random id issued by Firebase Authentication when you first open the app. If you play as a guest, that id is all there is — no email, no password, no name attached to you anywhere.
• An email address, only if you make an account. Adding one is optional and exists so your games follow you to another device. It is used to sign you in and for nothing else.
• A display name. Whatever you type. It is shown to everyone in your game, it appears in the story the Narrator tells, and it does not have to be your real one.
• What you send in a game. Chat messages in Online rooms, the fixed quick-chat bubbles, votes, and the record of what happened — who was in the room, what phase it was, who left the game and how.
• Interests, only if you switch them on. The tags you can give the Narrator to build a scene from. This is off by default and stays off until you turn it on; nothing reads them while it is off.
• A push token per device, only if notifications are on. It identifies a device, not a person, and turning notifications off deletes it.
• Preferences. Sound, haptics, reduced motion, and your language, so the app behaves the same next time.

What we do not collect

• No advertising, and no advertising SDK. There are no ads in this version and nothing in the app is tracking you across other apps or websites.
• No location, contacts, photos, or calendar. The app never asks for any of them.
• No audio. Push-to-talk voice chat is switched off in this release. The app does not record, transmit, or store anything from your microphone.
• No payments. There is nothing to buy, so there is no payment information to hold.

Who else sees it

Four companies may process some of this on our behalf. We give each only what its part of the service needs.

• Google (Firebase). Sign-in, the database, the server, file storage, and notification delivery. Everything above is stored on Google Cloud infrastructure.
• Apple. If you choose Sign in with Apple, Apple authenticates your Apple Account and may give Mafi your name and email address, or an Apple private-relay address if you choose to hide your email. Mafi receives no Apple Account password.
• Anthropic.When a room has the AI Narrator switched on, we send it the facts of the night it is about to describe: the day number, the display names of who left the game and who is still in it, and any interest tags whose owners opted in. It is never told anyone’s role, and it is never sent an email address or an account id.
• ElevenLabs. The finished paragraph — which contains display names — is sent to be read aloud. The audio is stored so the same paragraph is never rendered twice.

We do not sell anything to anybody, and we do not share any of it for advertising.

Who can see your messages

The people in your game, and us. Chat and the story are visible to the players in that room, which is the point of a game about talking to each other — so treat a room as a public place and do not put anything in it you would mind a stranger reading.

If somebody reports a message, we read that message and the ones around it in order to act on the report. That is the only routine reason anybody at Bitesites LLCreads a game’s chat.

How long it is kept

Your profile and preferences stay until you delete them. Games, and the chat inside them, are kept as part of the record of the game that was played.

You can delete your account from inside Mafi, on any device: open your account screen and choose “Delete my account”. It is immediate and it cannot be undone. We delete the account itself, the profile, the interests, the stats, your block list, and every push token. We detach your name from messages you sent — the messages stay, because a game’s record is not one player’s to erase — and seats in games still being played are kept, with the name off, so the rest of the table can finish. Reports filed about a message are kept, because deleting them would make the safety record deletable by whoever caused it.

If you cannot reach the app — you have uninstalled it, or lost the guest session — email support@bitesites.org from the address on the account and we will do it for you.

Children

Mafi is for players 13 and older and is not directed to children under 13. It is not in the Kids Category and we do not knowingly collect anything from a child under 13. If you believe a child under 13 has an account, email us and we will delete it.

Changes

If this page changes in a way that affects what we collect or who sees it, the date at the top changes with it, and a material change is announced in the app before it takes effect.