RPS Mafia Privacy Policy — Version History

Every version we have published, newest first. Superseded versions stay online at a permanent address so that a policy you agreed to can always be read back exactly as it stood.

  1. Version 2026-09-08

    Current

    Effective: September 8, 2026

    Documents the age check the app now shows before anything else. A new "How we check your age" section describes what is asked, what happens to the answer, and what happens if it is below the minimum age. The important detail is what is NOT done: the date of birth is used once to work out an age and is then discarded, is never stored, and never leaves the device — only the outcome is kept, and only locally. The Children section is rewritten to describe the check rather than only the prohibition, and the do-not-collect list now says explicitly that a date of birth is not among the things we hold. No other practice changed, and nothing new is collected by this release.

    • New section: how the age check works and what happens to the answer
    • The date of birth is discarded after the check — not stored, never transmitted
    • Only the outcome is remembered, on the device, and a refusal is permanent
    • Children section rewritten around the check rather than the prohibition alone
    • Do-not-collect list now names date of birth explicitly
    • No new collection of any kind in this release

  2. Version 2026-09-07

    Effective: September 8, 2026

    Initial Privacy Policy for RPS Mafia, published before the game leaves early access. Documents the account system (anonymous by default, with optional Google or Apple sign-in), the scheduling records that game nights require, the reliability counters derived from them, optional push reminders, and the player reports and blocks that moderation depends on. States plainly that voice is relayed live through a server we operate ourselves and is never recorded, stored or transcribed, and that game state exists only in memory and is destroyed when the game ends. Lists every sub-processor by name. Confirms the app carries no analytics SDK, no advertising SDK, no crash reporter and no advertising identifier.

    • Accounts are anonymous by default; Google or Apple sign-in is optional and exists only to carry progress between devices
    • Voice is relayed live through our own server and is never recorded, stored or transcribed
    • Game state lives in memory only and is destroyed when the game ends
    • Game-night attendance and reliability counters disclosed as Tier B under the NeuEra Data Practices Charter, with the reason each field exists
    • Player reports store the report text and both player identifiers, because moderation cannot work without them
    • Push reminder tokens are stored only while reminders are on and deleted when they are turned off
    • No analytics SDK, no advertising SDK, no advertising identifier, no crash reporting
    • Sub-processors named: Google (Firebase Authentication and Cloud Messaging) and Fly.io (application, database and voice hosting)
    • Account deletion available on request today; in-app deletion is being built

Read the current Privacy Policy