Introduction
Knipsoft values your privacy. We process as little personal data as possible — only what is needed to make the app work and give you a good game of belote.
This policy describes which data we collect when you use Dix-de-Der or visit dixdeder.fr, why, how long we keep it, and which rights you have. We comply with the General Data Protection Regulation (GDPR).
Questions after reading? Email support@dixdeder.fr. We respond within 5 working days.
Who we are
The controller of your personal data is:
- Knipsoft
- Based in the Netherlands
- Chamber of Commerce (KvK) 54439108
- VAT NL001383841B13
- Email: support@dixdeder.fr
Knipsoft is the one-person business of Robin Knip, developer and publisher of Dix-de-Der and Klaverjas HD. There are no employees; all data processing is done by the owner.
What data we collect
We only collect data needed for the operation of the app and the website:
In the app
| Data | When | Reason |
|---|---|---|
| Email address | At account registration | Sign-in, password recovery |
| Username | At account registration | Identification in multiplayer |
| Password (hashed) | At account registration | Account security |
| IP address | On every server call | Anti-abuse, rate limiting |
| Game statistics | While playing | Rating, achievements, leaderboards |
| Chat & voice data | During multiplayer | Communication between players (not stored) |
| Purchase status | With a subscription | Activating features |
| Profile photo | Only if you set one yourself | Shown on your profile card and online |
| Advertising identifier | Depending on your consent choice | Showing ads (see Article 07) |
| Pseudonymous gameplay data + device identifier | Only with your consent (toggle in settings) | Training the neural brain and calibrating the rating |
| Chat message text + language code | When using AI chat replies (single-player) | Generating a reply via an external AI service (Google Gemini) |
Pseudonymous gameplay data to improve the AI (only with your consent)
If you switch on the setting Help improve the AI (share anonymous games) (off by default), we collect a technical record of some of your single-player games: the variant and rules, the level, your rating, which AI brain was active and the model version, the starting position of the deal (a "seed") and your moves, and the final score. We attach an app-generated identifier to this — no username, email address or account. We use it solely to train the neural brain and calibrate the rating. You can turn it off again at any time.
AI chat replies (Google Gemini)
When you type a chat message in a single-player game, we send only the text of your message and the language code via our server to Google (Gemini) to generate a virtual player's reply. We do not send a username or game ID. If the service doesn't respond, the app falls back to fixed, local replies. (The replies are AI-generated and can occasionally be odd.) See also Article 06.
On dixdeder.fr
- Anonymous visit statistics (pages, browser, no IP tracking)
- Technically necessary cookies for the CMS to function
No location data. No contact list. No data you did not enter yourself.
Why we collect data
We process your data on one of the following GDPR legal bases:
1. Performance of the contract
To deliver the app to you — account management, multiplayer, subscription processing, support.
2. Legitimate interest
For anti-abuse (IP rate limiting) and error reports that help improve the app.
3. Legal obligation
For administrative obligations (subscription bookkeeping, as required by the tax authorities).
4. Consent
For personalised advertising (Article 07), for optional email updates about new versions, and for sharing pseudonymous gameplay data to improve the AI (GDPR Art. 6(1)(a)). All of it is voluntary: nothing happens without your explicit choice, and you can withdraw consent at any time.
How long we keep data
| Data | Retention period |
|---|---|
| Account data | As long as the account is active |
| Game statistics | As long as the account is active |
| Chat & voice data | Not stored, relayed in real time |
| Error logs & reports | 30 days |
| Accounting data (invoices) | 7 years (legal term) |
| Support email correspondence | 2 years |
| Pseudonymous gameplay data (after consent) | For as long as needed to train and improve the AI; if you withdraw consent, collection stops immediately (already-collected games remain part of the training set) |
| Chat message text sent to the AI service | Not stored by us; relayed to the external AI service (see Article 06) |
If you delete your account, all personal data is removed within 30 days, except data we are legally required to keep (such as invoices).
Who we share data with
We share your data only with the following parties, and only as far as necessary:
- Apple App Store / Google Play / Mac App Store — for processing purchases and subscriptions. They receive no game data, only purchase information.
- Hosting provider in the Netherlands — for running our servers. A data processing agreement has been concluded.
- Google and advertising partners — for showing ads in the free version (see Article 07).
- Google (AI chat replies via Gemini) — when you type a chat message in a single-player game, we forward only the text of your message and the language code to Google to generate a virtual reply. No username or game ID. Google may process this (partly) outside the EU; that transfer is covered by the EU-US Data Privacy Framework (a European Commission adequacy decision). If the service doesn't respond, the app falls back to fixed, local replies.
We never sell personal data to third parties.
Advertising
The free version of Dix-de-Der is financed by ads, shown via Google AdMob and its mediation partners.
On first launch, a GDPR-compliant consent dialog asks for your choice: personalised ads (with an advertising identifier) or non-personalised ads. You can change this choice at any time in the app settings. Advertising partners only receive the data corresponding to your choice.
An optional subscription removes ads entirely.
Your rights (GDPR)
Under the GDPR you have the following rights:
- Right of access — request which data we hold about you
- Right to rectification — have incorrect data corrected
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restriction — temporarily stop processing
- Right to data portability — receive your data in a readable format
- Right to object — to processing based on legitimate interest
- Right to withdraw consent — for any processing based on consent
To exercise a right, email support@dixdeder.fr with a brief description. We respond within 4 weeks.
As Knipsoft is based in the Netherlands, the lead authority is the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). Residents of France may also contact the CNIL (cnil.fr), which will forward the complaint.
Security
We take appropriate technical and organisational measures to protect your data:
- All communication between app and server uses TLS 1.3
- Passwords are stored with bcrypt hashing and a salt
- Servers are located in the Netherlands, protected with a firewall and intrusion detection
- Backups are encrypted and stored in a separate location
- Access to the production environment is limited to the developer himself
If, despite all measures, a data breach occurs that poses a high risk to your rights, we will inform you and the supervisory authority within 72 hours in accordance with the GDPR.
Changes & contact
We may amend this policy, for example if legislation changes or if we introduce new features. The latest version is always at dixdeder.fr. For significant changes we inform active users by email or via a notification in the app.
Questions, complaints, or want to exercise a right?
- Email: support@dixdeder.fr
- Knipsoft, the Netherlands
- KvK 54439108
— Robin Knip
Knipsoft