Privacy

1Who runs this

New World Mafia is run by its owner, who is based in the United Kingdom. They're the data controller for this site. To ask anything about your data, message any of the staff in the game (they're all listed, with a Message button, on the Staff page).

2What we store

• Your account: username, email address and password. The password is stored as a one-way hash, so nobody (including us) can read it.
• Your IP address: the last one you played from, the one you signed up from, and failed logins for 15 minutes. We use these to stop cheating, multiple accounts and attacks.
• Gameplay: your stats, items, money, crew, profile, and what you write in the game: mail, chat, texts, guestbook posts and ads.
• Burner phones are end-to-end encrypted in your browser. We only ever hold scrambled text we can't read.

3Why we store it

To run your account and the game, to keep it fair and safe (spotting multi-accounts, bots and abuse), and to send the password reset email you ask for. That's the legal basis: running the service you signed up for, and our legitimate interest in keeping it secure. We don't send marketing emails.

4What we never do

We don't sell or rent your data, we don't show ads, and there are no trackers or analytics scripts. Nothing is shared with anyone unless the law makes us.

5Who can see what

• Other players see your public profile: username, stats, crew, and anything you put on it.
• Admins can see your email, IP and messages when they need to look into cheating or abuse.
• In-game police can read some in-game messages (mail, chat and texts) with a warrant. That's a game feature, so never put anything real or private in the game.

6Cookies and your browser

We set one cookie, ma_session, which keeps you logged in and disappears when you close your browser. It's strictly necessary, so there's no cookie banner. A few settings (folded menu groups, muted profile songs) are kept in your browser's own storage and never sent to us.

7Images and songs from other sites

Profiles and avatars can show pictures linked from other websites, and some profiles play a song through YouTube (youtube-nocookie.com). When your browser loads those, that other site sees your IP address and browser, just like visiting it. We don't control what they log. You can mute profile songs at any time.

8How long we keep it

For as long as your account exists. Failed login records go after 15 minutes. Backups roll over and old ones are deleted within 30 days.

9Deleting your account

Ask us (message any of the staff in the game (they're all listed, with a Message button, on the Staff page)) and an admin will delete it. We wipe your name, email, IP, password, profile, letters, texts and chat posts, and lock the login. Game records other players rely on (fights, crew history) stay, under a placeholder name that can't be traced back to you.

10Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. If you think we've got it wrong you can complain to the Information Commissioner's Office at ico.org.uk, though we'd like the chance to sort it out first.

11Changes

If this notice changes in a way that matters, we'll say so in the game.