Privacy policy · Manillen

In short

Playing solo or practising against the computer works without an account and without internet. The state of those games stays on your device.
To play online you need an account. We then use your data to let you play, show your friends and messages, and keep your purchases and coins accurate.
We don’t sell your data. Ads are served through Google AdMob and participating advertising partners, are never personalised and appear only after a finished match. Data is still processed to provide them.
If you choose ‘Younger than 13’ or would rather not say your age, Manillen starts no advertising and asks for no consent.
You delete your account yourself in the app. Purchase and coin records we need for refunds or by law are then kept separately.

Who we are

Manillen is the card game for four players in two partnerships, for iPhone and iPad. The publisher and data controller is Pieter Van Oost, trading as P-IT, a natural-person enterprise. ‘We’ and ‘us’ mean Pieter Van Oost. The app is published on the App Store under the name Pieter Van Oost.

Enterprise number: 0675.886.991 · VAT number: BE0675886991. Establishment and business contact address: Vichtesteenweg 179, 8540 Deerlijk, Belgium. The Belgian enterprise register entry and P-IT establishment record confirm the identity, name and address.

For questions about privacy or your personal data, email us at support@manillenthegame.be. This policy covers the Manillen app, the online service behind it and this website. Apple, Google and Microsoft have their own privacy policies for their own services.

Playing without an account

Solo play and practice work on your device, even without internet or an account. If you also use online features or advertising, those do process the data described below.

Manillen does keep your preferences on your device, such as language, appearance, accessibility, sound and haptics, the card design and corner letters you chose, and a match you want to resume later. If you delete the app, that data is removed from your device.

Data when you play online

When you play online, we process the following data. We only ask for what a feature really needs.

Account: Your display name and account ID. If you sign in with email, also your email address; your password is managed by our account provider and we don’t store it. With Sign in with Apple: your Apple user ID, the email address Apple shares (possibly an Apple relay address) and an encrypted Apple key that lets us revoke the link later.; What for: creating, signing in to, recovering and protecting your account.
Device and session: A device ID that Manillen creates itself, session keys and, if you turn on push notifications, Apple’s push token. That app-created device ID is not the iOS advertising ID (IDFA).; What for: binding your sign-in to your device, making sure one device at a time controls your seat, and delivering notifications.
Game: Your moves in online matches, results and match history, wins, leaderboard positions and achievements.; What for: fair matches in which the server decides every move, restoring a match after a lost connection, and showing leaderboards and achievements.
Friends: Friendships and invitations, whether you’re online or at a table, players from your recent matches, and who you block or mute.; What for: playing together, inviting and stopping unwanted contact.
Messages: Private and group messages, group names and who sent what when. You choose what you write in a message: don’t share sensitive information in it.; What for: delivering messages and handling reports of abuse.
Abuse reports: Your report, the reason you give and the message or account it concerns.; What for: moderation and player safety.
Purchases and coins: Apple-signed details of your purchases (product, date, transaction number and status, such as a refund), your unlocks, your balance and every movement of regular and personal coins. No payment card details: only Apple sees those.; What for: delivering and restoring what you bought, handling refunds, preventing double grants and meeting our legal obligations.
Rewarded videos: The offer you received, its status, Google’s signed confirmation that you finished a video and the personal coin you received for it.; What for: granting your reward and preventing double grants or fraud.
Contacting us: Your email address and what you write to us.; What for: answering your question.
Technical data: Your IP address and connection details with every request to our server.; What for: providing the service and stopping abuse and attacks.

We use no separate analytics or tracking services. We don’t ask for your date of birth, address, contacts, photos, microphone or precise location.

Why we may do this

European privacy law (the GDPR) requires a legal basis for every use of your data. For Manillen these are:

Our agreement with you: your account, online matches, friends, messages, purchases, coins and rewards.
Our legitimate interest: securing the service, preventing fraud and abuse, moderating reports and fixing faults. You can object to this; see Your rights.
Your consent: for push notifications, and for advertising where the law requires consent. You can always withdraw consent.
A legal obligation: keeping purchase and coin records for as long as the law requires.

Advertising and Google

Manillen only shows ads from Google AdMob, and only after a match has completely finished. Never during a game, never while your connection is being restored and never while you wait for other players. If you bought ‘No ads’, you see no ads you didn’t choose yourself. You only ever watch a rewarded video because you want to.

First you choose your age group

Before anything happens with advertising, Manillen asks which age group you belong to. No answer is preselected. We don’t ask for your date of birth and don’t check your answer. Your choice stays on your device and is not sent to our server. If you sign out or switch accounts, it is erased.

What your choice does
You choose	What Manillen does
No choice yet, ‘Younger than 13’ or ‘I’d rather not say’	Manillen doesn’t start Google’s advertising service, asks for no consent and shows no ads on this device. Offline play stays fully available.
13 to 15	Never personalised. Google is asked to apply its protections for children and to show only content suitable for teens. You are not asked for consent.
16 to 17	Never personalised, with Google’s protections for teens and only content suitable for teens. Where the law requires it, we ask for your consent first.
18 or older	Never personalised and only content suitable for teens. Where the law requires it, we ask for your consent first.

Google never receives your age group itself, only the setting that follows from it, such as ‘under the age of consent’ or ‘teen protections’.

What Google collects

Even without personalisation, Google collects data once its advertising service is active, to show and measure ads and to prevent abuse. According to Google, this can include your IP address and the approximate location derived from it, identifiers Google uses for the app and device, data about the ads you see and what you do with them, and diagnostic and performance data. Google processes that data under its own policy: how Google uses information from apps that use its services.

Manillen does not request tracking permission through App Tracking Transparency. Before the advertising service starts, we turn off personalised ads and Google’s publisher first-party ID. These settings and the absence of an ATT prompt do not, by themselves, prove that an SDK processes no identifiers or links no data.

AdMob and advertising partners

We use the commonly-used set of advertising technology partners suggested by Google. Alongside Google, this can include other bidders, advertising services and measurement partners. The consent screen lists the current partners and their own privacy policies. Who receives data depends on the ad, your privacy choices and age settings; not every selected partner receives data on every request.

Consent and privacy choices

Where the law requires consent, Manillen shows Google’s consent screen in Dutch or English, with a clear option to decline. Declining has no effect on your game. You can change your age group and your consent at any time in the app under Profile › Advertising and privacy.

Rewarded videos

You only watch a rewarded video if you choose to, after a finished match. If you watch the whole video, Google sends our server a signed confirmation. Only after our server has checked it do you receive one personal coin. The confirmation contains a random one-time code, not your name, email address or account ID; we link that code to your account ourselves. Without a valid confirmation, no coin is added.

Purchases and coins

When you buy something in Manillen, you pay through the App Store. Apple processes your payment and your payment details. We only receive signed transaction details from Apple, so our server can check what you bought and deliver it to your account.

We record every movement of coins in a ledger: what was added, what you spent, what is reserved for a table and what you gave or received. That way every coin can be accounted for and nothing is granted twice. Personal coins are kept separately, so they never end up with anyone else.

Messages and abuse

Private and group messages travel over an encrypted connection, but they are not end-to-end encrypted: our server can read them so that we can handle reports of abuse. Only the current members of a conversation can read it.

When you report a message or player, moderation reviews your report together with the message or account it concerns. A report doesn’t automatically block anyone. Blocking stops messages and invitations between you and that player and removes your friendship. Muting only turns off push notifications for a conversation.

Push notifications

Manillen only asks permission for push notifications when you turn them on yourself. You choose separately for invitations and for messages; both are off by default. A push notification contains only a general sentence, such as ‘Open Manillen to view a new message’, never the sender’s name or the content of a message.

For this we store the push token Apple creates for your device. If you turn push notifications off in the app or in iOS Settings, or sign out, you no longer receive push notifications on that device.

How long we keep data

We keep data no longer than needed. Each kind of data has its own period:

Retention periods
Data	How long
Live match events, used to recover after a lost connection	48 hours
Receipts for moves and commands	30 days after completion
Results of finished matches, your online match history and recent players	90 days
Private and group messages	90 days
Database backups	7 days
Account, friends, leaderboard wins and achievements	Until you delete your account
Push token	Until unregistration or account deletion is processed. Otherwise the registration expires 30 days after its last renewal; expired registrations are removed during cleanup.
Purchase, coin and reward records	As long as needed for refunds, reconciliation and statutory record-keeping, access-restricted and separate from your profile
Abuse reports and their evidence	As long as needed to handle the report, access-restricted
Emails to us	As long as needed to handle your question
Your age group, on your device only	Until you sign out, switch accounts or delete the app

The periods in hours and days are the service’s current settings. If we change them, we update this table too. A backup can contain data you have already deleted until that backup expires after 7 days. Recovery requires reapplying the deletion records we keep separately before online access resumes. We track erasure by Apple and PlayFab separately.

Before sending push notifications we check whether the session has been revoked. Signing out does not erase the stored token immediately. If you disable notifications in iOS, the app can communicate that change to our server at its next synchronization.

Deleting your account

You delete your account yourself in the app, under Profile › Delete account, and confirm with your sign-in details. You don’t need to email us or wait for a subscription to end.

Straight away

All your devices lose online access and all sessions are revoked.
Your profile, friends, invitations, presence, progress and the messages you wrote are deleted. You are removed from group conversations, and names of groups you created are neutralised.
No more push notifications are sent to your devices.

Afterwards, in the background

We revoke the link with Sign in with Apple and ask Microsoft PlayFab to erase your player account. This can take a while and continues even if you close the app. You can check the status of your request in the app.

What we keep separately

Purchase and coin records needed for refunds, reconciliation or legal obligations, access-restricted and separate from your profile. Deleting doesn’t move purchases to another account and doesn’t refund anything automatically.
A minimal deletion marker without a name or email address, used by our recovery procedure to reapply deletions when a backup is restored.
Evidence for an open abuse report, for as long as needed to handle it.

A subscription doesn’t stop by itself

Deleting your Manillen account doesn’t cancel an Apple subscription. Use ‘Manage Apple Subscriptions’, before or after deleting. Offline play stays available; deleting the app removes its local game files and preferences.

Your rights

You have the right to:

see your data and get a copy of it;
have incorrect data corrected;
have your data erased; you can delete your account in the app straight away;
have processing restricted or object to it;
receive data you gave us in a common format;
withdraw consent, for example for advertising or push notifications.

Email us at support@manillenthegame.be. We may ask you to confirm that the account is yours, for example by emailing from your account’s email address. We never ask for your password. We reply within the period the GDPR requires: in principle within one month.

If you disagree with how we handle your data, you can complain to the supervisory authority in the country where you live or work. In Belgium that is the Data Protection Authority.

Security

Connections between the app and our service are encrypted.
Your sign-in details are stored in your device’s keychain, not in ordinary app settings.
We don’t store passwords ourselves. Keys for revoking an Apple link are stored encrypted.
The server decides every online move and every coin; the app can’t grant anything itself.
Only people who need it for their work get access to purchase records or abuse reports.

No system is completely secure. If you discover a security problem, please email us.

This website

The source of these pages contains no cookies, analytics, trackers or downloads from other websites. Cloudflare serves the pages and processes technical data such as your IP address to do so. The hosting settings must also respect this limited processing.

Changes and contact

If we change this privacy policy, we show the new date at the top. If we ask for your consent for something new, we ask for it again in the app.

A question, or something not right? Email support@manillenthegame.be.