Privacy Policy

MM2 Values ("MM2 Values", "we", "us", or "our") runs a fan-made website and mobile app for the Roblox game Murder Mystery 2 (MM2). We show live MM2 values, a trade calculator, a trade feed, and a public chat.

We are not made by, linked to, or paid by Roblox Corporation or Nikilis. All MM2 names and art belong to their owners.

This Privacy Policy covers:

• The MM2 Values website at mm2values.app (and any other domain we own).
• The MM2 Values mobile app for iOS (App Store) and Android (Google Play).
• Any feature that links back to this policy — including chat, DMs, trade posts, and push notifications.

We call all of these the "Services".

We keep the data we collect as small as possible. Here is what we collect and why.

a) Account info

When you sign up, we collect the email and password you use, or the Google / Apple sign-in info you choose. We use Firebase Authentication to check these safely. We never see or store your Google or Apple password.

b) Profile info

You can pick a display name, a profile picture, and a Roblox username. Other players can see these. You can change or remove them any time.

c) Trade and chat content

When you post a trade, send a public chat message, or send a private DM, we store what you send so the other person can read it. Trade posts are public. DMs are only visible to you and the person you message.

d) Device and log info

Like almost every website and app, we get basic technical data such as your IP address, device type, operating system, browser, and app version. We use this to keep the Services safe and to fix bugs.

e) Push notification tokens (mobile app)

If you turn on notifications in the app, we store a push token (from Apple Push Notification Service or Firebase Cloud Messaging) so we can send you alerts about your trades and DMs. You can turn notifications off any time in your device settings.

f) Purchase info (if you buy Pro)

If the app offers a paid "Pro" feature, purchases are handled by Apple (App Store) or Google (Google Play). We get a confirmation that you have an active subscription, but we do not see or store your credit card or billing details.

g) Cookies and analytics

The website uses a small number of cookies to remember your theme choice and to keep you signed in. We may use Firebase Analytics and/or Google Analytics to see how the Services are used. This helps us improve things like speed and the list of values.

We use the data above to:

• Create and run your account.
• Show you live MM2 values and the trade feed.
• Let you post trades, send chats, and send DMs.
• Send push notifications you opted in to.
• Keep the Services safe, stop spam, and ban bad actors.
• Fix bugs and improve features.

We do not sell your personal information.

To run the Services, we use a few trusted companies. Each has its own privacy policy.

• Firebase & Google Cloud — sign-in, database, push notifications, and analytics.
• Apple & Google — App Store and Google Play sign-in, and in-app purchases.
• Vercel or a similar host — hosts the website and handles basic server logs.
• CDNs — deliver images, fonts, and scripts quickly.
• Ad networks (if shown) — such as Google AdSense or Google AdMob in the mobile app. These partners may use cookies or device IDs to show ads. You can reset your ad ID in your device settings.

We share the smallest amount of data needed for each of these services to work.

We only share your data in these cases:

• With other users — your display name, avatar, trade posts, and public chat messages are public. DMs are shared with the person you send them to.
• With service providers — like the ones listed above, only so the Services can run.
• For safety — if we must follow the law, protect our users, or stop fraud.
• Business changes — if we ever sell or transfer the app, data may move with it. We will tell you first.

We keep account info for as long as your account is active. If you ask us to delete your account, we remove your personal data within 72 hours (see the Delete Account page).

Some data may stay in backup copies for a short time before it is cleared. Logs are usually kept for no more than 90 days.

You can:

• See or change your profile info from the app or website.
• Turn off push notifications in your device settings.
• Ask us for a copy of your data by emailing [email protected].
• Ask us to delete your account any time — see the Delete Account page.

If you live in the EU, UK, or California, you also have rights under GDPR, UK GDPR, and CCPA, including the right to object to processing and the right to not be sold. We do not sell your data, but you can still email us with any request.

The Services are not meant for children under 13 (or under 16 where local law requires it). If you are under 13, please do not sign up or post anything. If we learn that a child under 13 made an account, we will delete it.

Parents: if you think your child made an account, email us at [email protected] and we will delete it right away.

We use industry-standard Firebase security rules, HTTPS, and encrypted connections to protect your data. No system is 100% safe, but we work hard to stop leaks. If anything ever goes wrong, we will tell affected users.

We are a small fan project. The servers that run the Services may live in the United States or other countries. By using the Services, you agree that your data may be moved and stored outside your country.

We may update this Privacy Policy from time to time. If we make a big change, we will post a notice on the website and in the app before the change starts. The "Last updated" date at the top will also change.

Questions or privacy requests? Email us at:

[email protected]