Privacy Policy

MM2 Trade Hub ("MM2 Trade Hub", "we", "us", or "our") runs a fan-made website and mobile app for the Roblox game Murder Mystery 2 (MM2). We show live MM2 values, a trade calculator, a trade feed, and a public chat.

We are not made by, linked to, or paid by Roblox Corporation or Nikilis. All MM2 names and art belong to their owners.

This Privacy Policy covers:

• The MM2 Trade Hub website at mm2values.app (and any other domain we own).
• The MM2 Trade Hub mobile app for iOS (App Store) and Android (Google Play).
• Any feature that links back to this policy, including chat, DMs, trade posts, and push notifications.

We call all of these the "Services".

We keep the data we collect as small as possible. Here is what we collect and why.

a) Account info

When you sign up, we collect the email and password you use, or the Google / Apple sign-in info you choose. We use Firebase Authentication to check these safely. We never see or store your Google or Apple password.

b) Profile info

You can pick a display name, a profile picture, and a Roblox username. Other players can see these. You can change or remove them any time.

c) Trade and chat content

When you post a trade, send a public chat message, or send a private DM, we store what you send so the other person can read it. Trade posts are public. DMs are only visible to you and the person you message.

d) Device and log info

Like almost every website and app, we get basic technical data such as your IP address, device type, operating system, browser, and app version. We use this to keep the Services safe and to fix bugs.

e) Push notification tokens (mobile app)

If you turn on notifications in the app, we store a push token (from Apple Push Notification Service or Firebase Cloud Messaging) so we can send you alerts about your trades and DMs. You can turn notifications off any time in your device settings.

f) Purchase info (if you buy Pro)

If the app offers a paid "Pro" feature, purchases are handled by Apple (App Store) or Google (Google Play). We get a confirmation that you have an active subscription, but we do not see or store your credit card or billing details.

g) Cookies, analytics and advertising

The website uses a small number of cookies to remember your theme choice and to keep you signed in. We may use Firebase Analytics and/or Google Analytics to see how the Services are used. This helps us improve things like speed and the list of values.

We also use third-party advertising, including Google AdSense, to keep the site free. Google and its partners may use advertising cookies to serve and measure ads, including ads based on your visits to this and other sites. You can opt out of personalized advertising in Google's Ads Settings, or review the options at aboutads.info/choices. Where consent is required by law, we ask before any non-essential cookie is set, using the consent banner shown on your first visit. Choosing "Essential only" keeps advertising and analytics cookies switched off.

We never show ads on private surfaces. Chat, direct messages and your personal My Stuff page load no advertising code at all.

h) Date of birth (only for email updates)

We ask for your date of birth only if you turn on email updates. We use it only to confirm you are 13 or older. See section 5.

We use the data above to:

• Create and run your account.
• Show you live MM2 values and the trade feed.
• Let you post trades, send chats, and send DMs.
• Send push notifications you opted in to.
• Send news and updates by email, only if you opt in (see section 5).
• Keep the Services safe, stop spam, and ban bad actors.
• Fix bugs and improve features.

We do not sell your personal information.

Account emails. We may email you about your account when we need to. For example, to verify your email address, reset a password, or tell you about a moderation decision or an important change to this policy. These emails are not marketing.

News and updates are optional. We only send news and updates by email (such as new features, value updates and events) if you choose to get them. You can opt in:

• with the "Email me news and updates" box when you sign in (it starts unticked),
• from a one-time prompt in the app, or
• with the Email updates switch in Settings.

You never have to opt in to use the app.

Age. Email updates are only for users aged 13 or older. Before we turn them on, we ask for your date of birth once. If you are under 13, we will not send you news or updates by email.

Unsubscribing. Every news email has an unsubscribe link. You can also turn email updates off in Settings at any time. We act on unsubscribes promptly, and within 10 business days at the latest. Unsubscribing stops news and updates; we may still send account emails when needed.

What we record. We keep a record of whether you opted in, when, and where (the sign-in screen, the prompt, or Settings). This lets us respect your choice and show that we had your permission.

Who sends them.We use a third-party email delivery provider to send our emails. We share only your email address and what is needed to deliver the message, and the provider can't use it for anything else. We never sell your email address or share it with advertisers.

To run the Services, we use a few trusted companies. Each has its own privacy policy.

• Firebase & Google Cloud: sign-in, database, push notifications, and analytics.
• Apple & Google: App Store and Google Play sign-in, and in-app purchases.
• Vercel or a similar host: hosts the website and handles basic server logs.
• CDNs: deliver images, fonts, and scripts quickly.
• An email delivery provider: sends our emails. See section 5.
• Ad networks: Google AdSense on the website, and Google AdMob in the mobile app. These partners may use cookies or device IDs to show ads. See section 3(g) for how to opt out on the web; on mobile you can reset your ad ID in your device settings.

We share the smallest amount of data needed for each of these services to work.

We publish a Chrome extension, MM2 Values & Trade Calculator. It is separate software from this website and the mobile app, and the accounts, chat, advertising and analytics described elsewhere in this policy do not apply to it.

• It collects no personal information and has no accounts or sign-in.
• It contains no analytics, no advertising and no tracking of any kind.
• It never sends us anything about you, the trades you build, or the pages you visit.

It does make network requests. To show current values it downloads our public value feed. That is the same public file this website loads, and a plain download of public data: it carries no account, no identifier and nothing about you beyond what any request to a web server necessarily includes (your IP address and browser user-agent, handled by our CDN as described in section 6).

Downloaded values are cached on your device using Chrome's extension storage so the extension is fast, works offline, and puts less load on our servers. It also stores your saved trade board. Removing the extension deletes all of it.

The extension requests access only to that one data domain. It asks for no access to the websites you visit, cannot read page content, and cannot see your browsing history.

We only share your data in these cases:

• With other users: your display name, avatar, trade posts, and public chat messages are public. DMs are shared with the person you send them to.
• With service providers: like the ones listed above, only so the Services can run.
• For safety: if we must follow the law, protect our users, or stop fraud.
• Business changes: if we ever sell or transfer the app, data may move with it. We will tell you first.

We keep account info for as long as your account is active. If you ask us to delete your account, we remove your personal data within 72 hours (see the Delete Account page).

Some data may stay in backup copies for a short time before it is cleared. Logs are usually kept for no more than 90 days.

You can:

• See or change your profile info from the app or website.
• Turn off push notifications in your device settings.
• Ask us for a copy of your data by emailing [email protected].
• Ask us to delete your account any time. See the Delete Account page.

If you live in the EU, UK, or California, you also have rights under GDPR, UK GDPR, and CCPA, including the right to object to processing and the right to not be sold. We do not sell your data, but you can still email us with any request.

Many of our users are young. We don't knowingly collect personal information from children under 13 without a parent's consent. Children under 13 should only sign in, chat or post with a parent's supervision.

Parents: if you think your child gave us personal information without your consent, email us at [email protected] and we will delete it right away.

We don't send news or updates by email to users under 13.

See our Child Safety Standards for how we protect young users and act on reports.

We use industry-standard Firebase security rules, HTTPS, and encrypted connections to protect your data. No system is 100% safe, but we work hard to stop leaks. If anything ever goes wrong, we will tell affected users.

We are a small fan project. The servers that run the Services may live in the United States or other countries. By using the Services, you agree that your data may be moved and stored outside your country.

We may update this Privacy Policy from time to time. If we make a big change, we will post a notice on the website and in the app before the change starts. The "Last updated" date at the top will also change.

Questions or privacy requests? Email us at:

[email protected]