Privacy statement

What VosBridge keeps about you, why, and for how long. In plain language.

Draft: this text will be reviewed before VosBridge opens more widely.

Who we are

• VosBridge is a service of StepFox (Bosven 314, 5464 ND Veghel, the Netherlands; Chamber of Commerce no. 18067248). StepFox is responsible for your data.
• Questions about privacy? E-mail privacy@vosbridge.com. Other questions: e-mail help@vosbridge.com, or tap ‘Help’ (top right) → ‘Send us a message’.

What we store

• The name you type at a table. The other players see it; a nickname is fine.
• The boards: cards, calls, played cards and the analysis, so you can replay them later.
• Messages in the table chat, with the name of who wrote them.
• In Today's boards your name and score appear on that day's ranking.
• Testers: their messages to Claude, with the screen they were on (page, table, board, screen size).
• If you sign in: your e-mail address, your name and language, the tables you sat at with your account, and that (and when) you accepted the terms. There is no password.
• A message you send through ‘Help’, with the screen you were on; your e-mail address only if you enter it to get an answer.
• E-mails you send us (to help@ or privacy@) and our answers.
• If you take a subscription: which one and until when, and the invoices (name, e-mail address and amount).
• If we give you extra free days: how many, until when and why.
• If you play free at the table of someone with a plan: on which days (three at most), so we can count them.
• A privacy request (to see or delete your data): only when it came and what happened to it, without your name or e-mail address.
• If you sign up on vosbridge.com for ‘Tell me when VosBridge opens’: your e-mail address, your first name if you enter it, your language, when you signed up and confirmed, and which text you agreed to. We only send it the confirmation e-mail and one e-mail about the opening.
• Visitor numbers, counted ourselves on our own server: which pages of the website and which screens of the app are viewed, the kind of source (for example ‘Google’, ‘Google Ads’, ‘ChatGPT’, ‘e-mail’, ‘direct’ or the name of another website), phone, tablet or computer, and your browser's language. To count you only once a day, we make a code from your IP address and your browser's name, with a secret number that is thrown away after that day. We do not store your IP address itself, and the next day we cannot recognise you. Search engines and other robots are counted separately.
• If you sign up or make an account, we only keep the kind of source of that day with it (for example ‘Google Ads’), to see which advertising works. You can see it under ‘See my data’.
• If a search in ‘? Help’ finds nothing, we only keep those search words (in lower case, at most 100 characters), to improve the help. Not who searched, and no e-mail address or phone number: anything like that is thrown away at once.

What we do not store

• No password, IP address or payment data. Your e-mail address only if you sign in, enter it with a message or sign up for ‘Tell me when VosBridge opens’; we only use it to send you sign-in codes, the e-mails about that sign-up, replies to your message, messages about your subscription or your privacy request, and reminders you switch on yourself: for an appointment at a table, or each morning for today's boards, and an offer now and then if you switch that on under ‘My account’ (you can switch them off at any time).
• No advertising, no ad networks and no third-party visitor statistics (such as Google Analytics). Counting visitors uses no cookies, and no code from Google or any other company on the website.

On your own device

• Your browser remembers your seat at the table, your display settings and the last name you used.
• A small cookie (vb_app) remembers that you use the app, so vosbridge.com opens the app for you instead of the front page. It contains nothing about you and is not shared with anyone.
• That stays on your device; clearing the browser data removes it.

Who processes the data

• The server and database run at Amazon Web Services in Frankfurt (Germany); so do the backups. Amazon sends the e-mails (sign-in codes and reminders) from Frankfurt.
• When you press 'Explain this board', that board's cards, auction and play go to Anthropic (the maker of Claude) in the United States. Names and other personal data are not sent.
• E-mail to VosBridge arrives at Amazon in Ireland; the server in Frankfurt collects it there and stores it.
• Payments go through Adyen (Adyen N.V., Amsterdam, the Netherlands). Adyen receives your payment details (your bank account or card), the amount and your e-mail address. You pay on Adyen's own payment page: VosBridge never sees your card number or bank details. With a monthly subscription Adyen keeps a code to charge the next month; we have it deleted when you cancel.
• We read and answer e-mail to help@vosbridge.com and bram@vosbridge.com with the help of AI: Claude by Anthropic (United States) summarises your e-mail and suggests an answer. A person reads it and sends it; the AI never sends anything itself. E-mail to privacy@vosbridge.com does not go through AI. If the AI recognises a privacy request in an e-mail to help@, it suggests no answer: a person handles it. To suggest better answers, the AI also receives a few of our earlier answers as examples, without names, e-mail addresses or phone numbers.
• There are no other parties.

How long

• A table with its boards and chat is deleted automatically 12 months after it was last used.
• An account stays until you have your data deleted yourself (under ‘My account’ → ‘Delete my data’). After you confirm you have 7 days to change your mind: until then everything works as usual and you can undo it. After that everything is erased. A signed-in device is signed out after 12 months without use.
• Messages sent through ‘Help’ are deleted after 12 months.
• E-mail conversations with VosBridge are deleted one year after the last message.
• We keep invoices for seven years because tax law requires it. Once your data is deleted they are no longer linked to an account.
• A sign-up for ‘Tell me when VosBridge opens’ is kept until 30 days after the e-mail about the opening, or until you unsubscribe with the link at the bottom of every e-mail. If you do not confirm the sign-up within 7 days, we delete the address.
• Visitor numbers per page are kept for 13 months; after that only daily totals remain. A day's secret number is deleted after that day.
• Help search words without an answer are kept for 13 months.
• Database backups are kept for 7 days.

Your rights

• You may ask which data we hold about you, and ask us to correct or delete it.
• Testers ask via 'Message to Claude'; we then delete the table with everything that belongs to it.
• Have an account? Under ‘My account’ → ‘See my data’ you see everything we keep about you, and can save it as a file. ‘Delete my data’ erases it all; you first get a code by e-mail and then 7 days to change your mind.
• Signed up for ‘Tell me when VosBridge opens’? You can unsubscribe with the link at the bottom of every e-mail. If you have an account with the same address, you also see the sign-up under ‘See my data’, and it goes when you delete your data.
• No account, or no access to your e-mail any more? E-mail privacy@vosbridge.com. If an account belongs to your address, that address gets an e-mail to confirm the deletion.
• You can also complain to the Information Commissioner's Office (UK) or the Autoriteit Persoonsgegevens (the Netherlands).