Privacy policy
Last updated: 4 November 2026
This policy explains which personal data AstosStudio processes when you play Mob Holdout: Mafia Defense, visit this website or email us, why we do that, and which rights you have under the General Data Protection Regulation (GDPR).
This policy covers Mob Holdout: Mafia Defense and this website. Daily Puzzle Club, Rocket Rain and Kermis Jackpot are still in development; we’ll add them here before they’re released.
Who we are
AstosStudio is a sole proprietorship, registered with the Netherlands Chamber of Commerce (KvK) under number 93013116. AstosStudio is the controller for the processing described here.
Questions about privacy or your data: support@astosstudio.com.
Mob Holdout: Mafia Defense
What we process
- Anonymous player account. On first launch the game creates an account without a name, email address or phone number. You only get a random player ID.
- Game progress. Your progress, your scores for the leaderboards and the player name you choose. Other players can see your player name and scores.
- Family. If you start or join a family: the family name and tag, your rank, donations and points. Other players see your player name and rank.
- Gameplay statistics. Which modes you play, how far you get, which screens you open and technical errors. These are linked to your random player ID, not to your name. You can turn this off in Settings › Share anonymous gameplay data.
- Purchases. Payments go through Apple or Google. Through RevenueCat we only receive which purchase you made and whether a subscription such as VIP is active. We never receive your payment details.
- Ads. Optional rewarded ads come from Google AdMob. In the EU and EEA the game first asks for your consent. Without consent you get non-personalised ads; Google may still use limited data, such as your IP address and device information, to show and measure ads and to prevent fraud. On iPhone the game separately asks whether it may track you for ads. You can change that at any time in Settings › Privacy & Security › Tracking on your iPhone.
Why, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Running the game: account, progress, leaderboards, families, purchases | Player ID, progress, scores, player name, family data, purchase status | Performance of a contract (art. 6(1)(b)) |
| Improving the game and fixing bugs | Gameplay statistics, technical errors | Legitimate interest (art. 6(1)(f)); you can turn this off |
| Personalised ads | Advertising ID, device and usage data (via Google) | Consent (art. 6(1)(a)); you can withdraw it |
| Non-personalised ads and fraud prevention | Limited device data, IP address (via Google) | Legitimate interest (art. 6(1)(f)) |
This website
This website uses no cookies, no analytics and no tracking. Fonts are served from this site itself. The site is hosted by GitHub (GitHub Pages), which processes your IP address in its server logs to deliver and protect the site. Legal basis: legitimate interest (art. 6(1)(f)).
When you email us
If you email us, we use your email address, your message and any attachments to help you. Our email is hosted by TransIP in the Netherlands. We keep support emails until your question has been handled, and then for at most two years so we can recognise recurring problems. Legal basis: legitimate interest (art. 6(1)(f)), or performance of a contract when your question is about a purchase.
Who receives your data
- Supabase: game server and database, located in the EU (Frankfurt). Processor.
- RevenueCat: handling of purchases and subscriptions, United States. Processor.
- Google (AdMob): ads. For personalised ads Google acts as an independent controller; see Google’s privacy policy.
- Apple and Google: app stores and payments, each as an independent controller.
- GitHub: hosting of this website, United States. Processor.
- TransIP: email hosting, the Netherlands. Processor.
When data goes to the United States, this happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. We do not sell your data.
How long we keep your data
We keep your game data for as long as your account exists. You can delete everything yourself in Settings › Delete account and data. This removes your account, progress, scores, family data and gameplay statistics from our server. If you lead a family, leadership passes to the member with the highest rank. Read more on deleting your account.
Purchases remain recorded with Apple or Google, because they are part of your store account. Cancel subscriptions in your App Store or Google Play settings; deleting your game account does not cancel them.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing (including the gameplay statistics), and to data portability. Where we rely on your consent, you can withdraw it at any time; this does not affect processing that already took place.
Email support@astosstudio.com to use these rights. Your account has no name or email address, so please include your player name so we can find your data. We respond within one month.
You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Children
Mob Holdout is not intended for children under 13. If you are under 16, only agree to personalised ads with permission from a parent or guardian.
Security
Connections between the game, our server and this website are encrypted, and only we have access to the management environments of our services.
Automated decisions
We do not make decisions about you based solely on automated processing.
Changes
When we change this policy, we update the date at the top. We announce important changes in the game.