Privacy

Last updated October 9, 2026

Mavally is a game. We keep as little as we can, only to run its online features, and we never sell your data or use it for advertising.

What we keep

• Your farm’s backup. When you’re online, your save is copied to our server each night so it can’t be lost. It belongs to a random account ID your device makes, not to your name.
• Your online profile, if you make one. A username, which other players see. From age 13, an email address and a password, so you can sign in on another device. Your email is never shown to other players. We store passwords only as a salted hash, never the password itself.
• Your age group. The game asks for a month and a year once and keeps only the age group it falls in, never the date. The group decides which safety settings apply.
• Friends. Your friends, friend requests both ways, and the players you’ve blocked.
• Chat. Emojis, ready-made phrases and typed messages pass through our server. We keep them for 30 days only so we can look into a report, and then they’re deleted. Voice chat is never recorded.
• Reports. When you report someone, we keep the report and its category so we can act on it.

What we don’t do

• No ads, no advertising IDs, no tracking across other apps or websites, and no selling or sharing of your data.
• No other player ever sees your IP address or where you are: everything between players goes through our server.
• This website sets no cookies and uses no analytics.

Children

Players under 13 start with the safest settings: no typed chat, no one can find them by username or email, and the Junction (the shared square) opens only when a parent allows it. Parents can change these settings, and the child always sees what was set.

Deleting your account

In the game, open Online Friends, then Account, then Delete my account. You have 7 days to change your mind. After that, your profile, your friends list and your cloud backups are deleted, and your username becomes free for someone else. The farm saved on your own device stays.

Where your data lives

Our server is in Germany, run by Hetzner. Connections go through Cloudflare, which protects the server and encrypts the connection.