Privacy policy

This policy explains what EnigMafia stores when you visit mafiosa.pages.dev, sign in to the god console, or play a game through the EnigMafia Discord bot. Last updated 8 October 2026.

Browsing this site

The Codex, Arena and Ruleset Lab run entirely in your browser. Nothing you deal, simulate or edit there is sent to a server. The site sets no cookies for visitors who do not sign in, and there are no analytics, ads or tracking scripts. Fonts are loaded from Google Fonts, which receives your IP address when your browser fetches them. The site is hosted on Cloudflare, which processes requests and keeps short-lived operational logs to run and protect the service.

Signing in to the god console

Signing in uses Discord OAuth with the identify scope only, which shares your Discord user ID, username and avatar. EnigMafia stores them in a signed, HttpOnly session cookie that expires after fourteen days or when you sign out, plus a ten-minute cookie that protects the sign-in flow. There is no session database. EnigMafia never sees your Discord password or email address.

Playing a game on Discord

When you join a game, the game stores your Discord user ID, display name and pronouns, the actions, votes, proxies, wills and death notes you submit, the private results delivered to you, and an audit log of moderator actions. If the game's gods turn on moderation assists, the bot reads recent messages in the town square channel to flag the text-based mechanics the role bible defines. It keeps nothing from messages that are not flagged; for a flagged message it stores the author's name and an excerpt of up to 180 characters so the gods can rule on it. Game data is visible to that game's gods, and is used only to run the game.

Sharing and retention

EnigMafia does not sell or share personal data. Game data is kept so gods can review and replay finished games, and is deleted on request. To ask for a copy or deletion of your data, see the contact page.