Who runs the game
Inner Core Studios (eenmanszaak), registered with the Dutch Chamber of Commerce under number 73990744 and based in the Netherlands, is responsible for this data. Contact [email protected].
This notice covers the Maffia Empire beta at innercorestudios.com/maffiabeta. Its accounts and server saves are an exception to our offline games’ device-only saves. The full studio privacy statement covers the rest of our website and games.
What we save
| Information | Why it is needed |
|---|---|
| Username, account ID and creation date | Identify your account and connect you to the shared city. |
| Salted password hash and recovery-code hash | Verify sign-in and recovery. We do not save passwords or recovery codes as readable text. |
| Your empire and game actions | Save cash, rank, experience, energy, heat, reputation, crew, cooldowns, jail state, territory and Family participation. |
| Businesses, cargo and cooperative operations | Record property, stock, assignments, contributions, market listings, delivery contracts, rewards and losses in the shared economy. |
| Family management and discussion | Keep membership invitations, officer roles, treasury transfers, headquarters projects and short messages you choose to post for your Family. |
| Check-in reports and recent gameplay time | Show changes since your last check-in, preserve lifetime outcome totals and slow computer players when several people are actively playing. Reading the page does not mark you active or clear your report. |
| Session records and short-lived security counters | Keep accounts signed in, protect account actions and limit abusive requests. |
We do not ask for your email address, real name, physical location or contacts. The map uses fictional crew positions in a real city; it does not use your device’s location.
What other players can see
Four empires marked [BOT] are computer-controlled game characters. They use the ordinary game rules without separate login accounts or an external AI service. Player counts distinguish people from bots.
Your username, rank, public progress, crew positions and condition, territory, Family membership and shared city events are visible to other players. Choose a username that does not identify you if you want to play under a pseudonym. Do not put personal information in Family names.
Passwords, recovery codes and login session information are never part of the shared city.
Family discussion and treasury records are visible to current members of that Family. Membership invitations are visible to their recipient and the inviting Family’s leaders and officers. Headquarters locations and officer roles are public game information. Family messages are plain text; please keep personal information out of them.
Player market listings show the seller’s game identity, offered goods, quantity and price. They do not expose your remaining inventory or cash balance.
One essential sign-in cookie
maffia_session keeps you signed in and protects account actions. It works only under /maffiabeta and uses Secure, HttpOnly and SameSite=Strict settings. A signed-in session lasts up to seven days; the temporary session before sign-in lasts 30 minutes. Signing out removes that session.
This cookie is necessary to provide the requested account service. It is not used for advertising, analytics or tracking across sites. The game has no analytics scripts or advertising. Maps, fonts and libraries are served from our own host.
Protecting accounts
Account and sign-in requests use HTTPS. Abuse protection uses counters keyed by a digest of the connecting IP address and/or username in 15-minute windows. The game does not store raw IP addresses or user-agent strings. Expired counters and sessions are removed during routine maintenance.
Keep the recovery code shown when you create your account. There is no email-based recovery. If you lose both your password and recovery code, we cannot verify your access to the account.
Hosting and retention
Cloudflare hosts the game and its D1 database as our service provider. Like other hosting providers, it processes connection data to deliver pages and protect the service. See Cloudflare’s privacy policy and data processing terms, which describe safeguards for international processing.
Your account and progress remain until you delete the account, or the beta is reset or closed. When you delete your account, we remove its active records and progress, revoke its sessions, and replace references to your username in shared events with “Former player”. Shared game outcomes may remain after you leave.
Recent game history, Family messages and treasury records have bounded retention. Older entries are replaced as new ones arrive and may be shortened further as the city grows. Current balances, living crew and active jobs remain saved. You can remove your own Family messages; leaders and officers can moderate their Family’s discussion. Deleting your account removes your authored Family messages and anonymizes your treasury entries. Donated game money remains with the Family.
Deleted records may remain temporarily in Cloudflare’s automatic database recovery history for up to 30 days before expiring. The game does not sell account data.
Your controls and rights
Open Account in the game to download your account, progress and own retained Family contributions, change your password, or delete your account and progress. Exports include your own messages and treasury entries, rather than other members’ private discussion. Clearing your browser storage signs you out; it does not delete a server account. Exported files may contain your chosen username and progress, so store or share them with care.
Under the GDPR you can request access, correction, deletion, portability or restriction of your personal data, and object where processing relies on legitimate interests. Contact [email protected] for requests you cannot complete in Account. You can also complain to the Dutch Autoriteit Persoonsgegevens.
We process account and shared game information to provide the multiplayer service you request (GDPR Article 6(1)(b)). Abuse prevention relies on our legitimate interest in protecting accounts and the game (Article 6(1)(f)). An account is required to play this multiplayer beta.