Privacy statement

The short version. Our offline games keep progress on your device and do not collect personal data. The Maffia Empire multiplayer beta is an exception: it needs an account, an essential sign-in cookie and server-saved progress so players can share a city. It has no analytics, advertising or tracking. The studio website keeps the anonymous statistics described below. We also receive information you choose to send us by email.

Who we are

Inner Core Studios (eenmanszaak), registered with the Dutch Chamber of Commerce (KvK) under number 73990744, based in the Netherlands. Where any personal data is processed at all, we are the controller. Contact: [email protected].

Our games

Offline games

The following applies to our offline games, excluding the Maffia Empire multiplayer beta described below. None of these offline games:

ask you to create an account or sign in with us;
collect your name, email address, device identifiers, IP address, location or contacts;
contain analytics, crash reporters, advertising or any other third-party tracking code;
send gameplay data, telemetry or usage statistics to us or to anyone else;
use the microphone or camera, or read files outside their own save folder.

For these offline games, save games, settings and progress are stored only on your device (or, for browser versions, in your browser’s storage for the site you played on). Deleting the game, or clearing that storage, deletes them. We never receive a copy.

These offline games are suitable for all ages. Because they collect nothing, they collect nothing from children either. This is not an age-rating statement for the Maffia Empire multiplayer beta.

Platform services that may process data

Some features are provided by the store or platform you play on, under that platform’s own privacy policy, not ours. We don’t receive personal data from any of them.

Steam (Valve): purchases, achievements, Steam Cloud saves, playtime and community features are handled by Steam. Steam may show us aggregate, anonymous statistics such as how many people own or wishlist a game. Steam privacy policy.
Apple App Store and Game Center: purchases, in-app purchases, achievements and leaderboards are handled by Apple through your Apple Account. Apple shows us anonymous download and sales figures only. Our App Store privacy label is Data Not Collected. Apple privacy policy.
itch.io: purchases, downloads and the browser versions hosted on itch.io are subject to itch.io’s own cookies and policy. itch.io privacy policy.

If you contact us about a game

If you email support, we receive whatever you include — usually your email address, and sometimes a save file or log. We use it only to help you, keep the thread for as long as it’s useful for that, and don’t share it with anyone. Log files from our games contain technical information about the game session (errors, hardware details) and no personal data beyond your computer’s user name if it appears in a file path.

Maffia Empire multiplayer beta

Maffia Empire at /maffiabeta/ uses player accounts and server saves. This is an exception to the offline-game policy above. The game privacy notice is also available before registration.

Account and saved progress: we store your chosen username, account ID and creation date, a salted password hash, a recovery-code hash, session records, and the game state needed to save your empire, crew, actions, territory and Family membership. Passwords and recovery codes are sent over HTTPS for verification; they are not stored as readable text. We do not ask for an email address, real name, location or contacts.
What other players see: your username, rank, public progress, crew positions and condition, territory, Family membership and shared city events. Choose a username that does not identify you if you want to remain pseudonymous. Passwords, recovery codes and login sessions are not shared with players.
Expanded game records: we also save businesses, cargo and operation contributions, market listings, delivery results, Family invitations/officer roles, treasury transfers, headquarters projects and messages you choose to post. Family discussion and treasury records are visible only to current Family members; invitations are visible to recipients and recruiting officers. Public listings identify the seller but not their remaining stock or cash. Personal check-in baselines and lifetime totals produce your report. The time of your last successful gameplay action helps pace computer players; merely reading pages does not record active play.
Computer players and history: four empires marked [BOT] are game characters without login accounts or an external AI service. Population counts distinguish humans from bots. Older game history, Family messages and treasury entries are bounded and may be shortened as the city grows. Account deletion removes your authored Family messages and anonymizes treasury entries; donated game money and shared outcomes remain. Exports contain your own retained Family contributions, not other members’ private discussion.
Essential cookie: maffia_session keeps you signed in and protects account actions. It is restricted to /maffiabeta, uses Secure, HttpOnly and SameSite=Strict, and expires after seven days for a signed-in account or 30 minutes before sign-in. Signing out clears that session. It is not an advertising or analytics cookie.
Abuse prevention: login and registration protection uses counters keyed by a digest of the connecting IP address and/or username in 15-minute windows. Raw IP addresses and user-agent strings are not stored by the game. Expired counters and sessions are removed by routine maintenance. The beta has no analytics, ads or third-party trackers; its maps, libraries and fonts are self-hosted.
Hosting and retention: Cloudflare hosts the application and its D1 database as our service provider, and processes connection data to deliver and protect the service. Account and game records remain until you delete the account or the beta is reset or closed. Account lets you download your account/profile and crew data and delete the account and progress. Shared event references to your username are replaced with “Former player”. Deleted records may remain in Cloudflare’s automatic database recovery history for up to 30 days before expiring. See Cloudflare’s privacy policy and data processing terms, including safeguards for international processing.

We process the account and shared game state to provide the multiplayer service you request (GDPR Article 6(1)(b)); abuse prevention relies on our legitimate interest in protecting accounts and the game (Article 6(1)(f)). You need an account to play this multiplayer beta. Keep the recovery code shown at registration: there is no email-based recovery, and without the password or recovery code we cannot verify account access.

This website

Statistics

These studio website statistics do not run within the Maffia Empire beta.

We keep our own visitor statistics so we can see whether the site works and what people are interested in. They are collected by a small script on this site and stored in our own Cloudflare account; no analytics company is involved. For each page view and click we record:

the page address and the language of the site you’re using;
the country the request came from (determined by Cloudflare from the connection; the IP address itself is not stored);
the website that linked you here, if any (domain only), and the campaign tags in the link if it had any (utm_source, utm_medium, utm_campaign — labels we put in links we share ourselves);
what you click on — store buttons, trailer play, screenshots, links to other sites — and how long the page was open and how far you scrolled;
whether you interacted with the page at all (moved the mouse, scrolled, tapped or pressed a key) — only a yes, to tell people from bots; where you clicked or what you typed is not recorded;
a random number that lives only in the current browser tab, so that the pages of one visit can be counted as one visit. It is not a cookie, it is not stored after the tab closes, and it cannot recognise you on a later visit.

Our own statistics do not record your IP address, browser, operating system, device, screen size or any identifier that persists between visits. Visitors whose browser sends a Do Not Track or Global Privacy Control signal are not recorded at all. Requests from programs that identify themselves as bots, or from browsers that report being controlled by automation software, are only counted as a bot hit (page and country) and nothing else is kept. The statistics are kept for three months. Legal basis: our legitimate interest in knowing whether the site works; because the data cannot be linked to a person, no consent banner is required.

Hosting

The site is served by Cloudflare. Like any web host, Cloudflare processes your IP address to deliver pages and to block abuse, and keeps short-lived request logs for that purpose. We don’t see them.

Cloudflare Web Analytics

These measurements are not loaded within the Maffia Empire beta.

Alongside our own statistics, Cloudflare Web Analytics measures how quickly pages load and counts visits per page, country, browser, operating system and device type. It sets no cookies, stores nothing in your browser, does not fingerprint visitors and does not use your IP address to follow you; we only see totals. Cloudflare’s privacy policy. Legal basis: our legitimate interest in a fast, working site.

If we offer a newsletter and you subscribe, your email address is stored by our newsletter provider, Buttondown, and used only to send you the emails you signed up for. Every email has an unsubscribe link, and unsubscribing removes you from the list. Buttondown’s privacy policy. Legal basis: your consent.

Games played on this site

Offline browser games hosted here, including Packlab, store their save data in your browser (local storage or IndexedDB). That data stays on your device; we don’t receive it. Clearing your browser’s site data for this domain deletes those local saves. Maffia Empire is different: its account and progress are saved on the server, as explained above; clearing browser storage signs you out but does not delete the account.

Trailers

Game pages show trailers hosted on YouTube. Until you press play, the page only shows a thumbnail served from this site and nothing is loaded from YouTube. When you press play, the video loads from YouTube’s privacy-enhanced domain (youtube-nocookie.com), and from that moment Google’s privacy policy applies to the player.

What this site does not do

No advertising or advertising/tracking cookies, and no selling or sharing of personal data with anyone other than the processors named above. The Maffia Empire beta uses the essential session cookie described above. Fonts, images and gameplay clips are served from this site itself, so nothing is requested from Google or any other third party unless you press play on a trailer. Links to Steam, itch.io, the App Store, YouTube, X and Reddit take you to those services; we don’t embed their trackers here.

Your rights

Under the GDPR (AVG) you can ask what personal data we hold about you, have it corrected or deleted, object to processing, or ask for it in a portable format. For offline games we hold no player records. For Maffia Empire you can export your account and progress or delete your account from Account; contact us for other rights requests. We may also hold emails you have sent us and, if you subscribed, your newsletter address. The studio website statistics are separate from multiplayer accounts. Email [email protected]. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

We update this statement before introducing a new kind of personal-data processing, and change the date at the top. The Maffia Empire multiplayer exception was added on 17 October 2026.