Privacy
Privacy
Which data GunMaffia processes technically, what for, and what you can choose yourself.
Who is responsible
Responsible for GunMaffia: Kenneth D.C.
Questions about your data: privacy@gunmaffia.com
Your account
When you register, we store your username, your email address, your password (not stored in readable form) and the details you enter in your profile yourself. We use your email address to activate your account, to reset your password and for messages about your account.
Game data and security
To run the game and to fight cheating, abuse and fraud, we keep track of your game actions (such as crimes, attacks, transactions and login attempts). For many of those actions, and when your account is created, your IP address is stored as well; for a few actions also your browser details (user agent).
Daily activity
For logged-in players we note once per day that you were active (only your account and the date, no time or page). We use this to measure whether players come back (for example after 1, 7 and 30 days). This is part of how the game works and is separate from your cookie choice.
Invitations (referral)
If you register through another player's invitation link, we remember who invited you. The inviter only sees that a player joined through their link. This also works if you only allow necessary cookies.
Where new players come from (only with permission)
If you choose "Allow all", we remember which channel you used on your first visit to GunMaffia: the source (for example google, another website or a campaign), the medium, where applicable the campaign name and variant, only the domain name of the referring website and only the path of the first page. The gm_src cookie only contains a random token; on the server we only store a hashed form of it.
For this measurement we do not store an IP address, browser details (user agent), a device fingerprint, the full referring URL or an email address.
The gm_src cookie expires after 30 days. A visit that does not lead to a registration is deleted after 90 days; only an anonymous daily total per source is kept. If you register, we keep the source you came from with your account.
If you arrive through a campaign link (/go/…), we only count that click if you allow analytics measurement.
Retention periods
Defined: gm_src 30 days; unconverted origin visits 90 days; your cookie choice 180 days; your session until you close the browser. No fixed periods have been set yet for account data and game and security logs; this page will be updated once they have been.
Changing your choice
You can change or withdraw your cookie choice at any time on the Cookies page.