What the app keeps about you, where it goes, and how to have it deleted.
In short
The app saves your games, your progress and your settings to an account so you don't lose them. It doesn't ask for your name or email unless you choose to sign in with Google. The chess engine runs in your browser, so the positions you analyse aren't sent anywhere to be analysed. Payments go through Stripe and your card never reaches us. We count which screens get used, per day, and you can turn that off. We don't sell your data or show you ads.
Who is responsible for your data
The data controller is [OWNER: legal name, from NEXT_PUBLIC_SELLER_NAME], a sole proprietor located in the United States and trading as woodpushr. Postal address: [OWNER: postal address, from NEXT_PUBLIC_SELLER_ADDRESS]. For anything about your data, write to ashe.wooo@gmail.com. The same details are at the top of the terms.
Our representative in the European Union, for people there to contact about their data (GDPR art. 27): [OWNER: EU representative's name and contact details, or confirm that none is needed].
Your account
The first time you open the app, it signs you in to an anonymous account using Firebase Authentication, a Google service. An anonymous account is a random identifier kept in your browser; it has no name, email or password attached to it.
If you choose to sign in with Google, that account is linked to your Google account. Google then shares your name, email address and Google account identifier with Firebase Authentication, and the app shows your name and email on your profile so you can see which account you are using. Signing out returns this browser to a new anonymous account; the games already in this browser stay in it.
You need to be at least 14 to use the app, wherever you live. If you are younger, please don't use it. In the United States, we never knowingly collect personal information from a child under 13, as the Children's Online Privacy Protection Act (COPPA) requires; if we learn that we have, we delete it.
What is saved to your account
Your account's data is kept in Cloud Firestore, a Google database, stored in the European Union, in a space only your account can read or write. Each item is stored with the time it was last changed, so your devices can agree on the newest copy. It holds:
Your profile: the display name you choose, the chess.com username you link, and the date you first saved a profile.
Your games:each game you finish or import — the players' names as the game recorded them, the moves, the result and how it ended, the time control, when it was played, its PGN, the engine's analysis of it, and for a Lichess game its link on Lichess. Also the game you are in the middle of, so you can pick it up again.
Your progress:your puzzle rating, results and streaks, your progress through the opening trainer, which games you have given a full review this month and how many opening lines you have drilled today (so the free plan's allowances follow you between devices).
Your settings:the board's look, piece set, sound pack, volume and mute, whether reaction sounds play, whether the evaluation bar is shown, how you draw arrows, and your reminder settings (below).
Some things stay in your browser and are never uploaded: your Lichess login (see below), and the app's own record of what it has already synced. Your browser also keeps a copy of your data in local storage and in the Firebase cache, so the app works offline. This storage is what the app needs to work; there are no advertising or third-party tracking cookies.
Why: keeping your account, your games and your settings is the service you asked for, so the lawful basis is the performance of our agreement with you (GDPR art. 6(1)(b)).
The chess engine
Analysis is done by Stockfish running inside your browser. The positions and moves it analyses are not sent to any server for analysis. (A finished game and its analysis are saved to your account, as above.)
Payments
Pro is sold through Stripe. Checkout and the customer portal where you manage your subscription are Stripe's own pages, and your card details are entered there and never reach us. When you start a checkout we tell Stripe your account identifier and, since you are signed in with Google, your email address, so the receipt reaches you and the payment is matched to your account.
Stripe then tells us about your subscription, and we keep one record per paying account: the plan, the subscription's status, when a trial or the current paid period ends, whether it is set to cancel, Stripe's identifiers for you and for the subscription, and when the record last changed. Only our server can write that record; you can read your own. Stripe's handling of your payment details is covered by Stripe's privacy policy.
Why:to sell you Pro and keep it working (art. 6(1)(b)), and to keep the invoices and payment records that tax law requires, including the EU's VAT rules for sellers outside the EU (art. 6(1)(c)).
If you are signed in with Google, the app may email your Google address, sent through Mailjet: a notice before a free trial turns into a charge; one email, a couple of weeks after a Pro subscription ends, saying it is there if you want it back; and the reminders you turn on yourself. To make sure each goes once, we keep a record of which emails were sent to your account and when, and whether you have unsubscribed. Every email has a link to stop them: a reminder's link turns reminders off, and any other email's stops all of them, which is recorded so nothing more is sent. Anonymous accounts are never emailed.
Why:the trial notice is part of the subscription you took out (art. 6(1)(b)); the one email after Pro ends is our legitimate interest in telling a former customer about the same product, which the EU's ePrivacy rules allow for existing customers, and you can refuse it (art. 6(1)(f)); reminders are sent because you asked for them, and stop when you turn them off (art. 6(1)(a)).
Reminders
Reminders are off until you turn them on, from your profile. When they are on, we keep: the setting itself (email, notifications on this device, or both, and the hour you chose) and the time zone of the browser that saved it, so the hour is yours; your Google address, for an email reminder, or for a notification the push address your browser gives us for that device; and a record of the days a reminder was sent, so you never get two in a day.
A notification is delivered by your browser's own push service — Google's for Chrome and Android, Mozilla's for Firefox, Apple's for Safari, Microsoft's for Edge — which sees that a notification is being delivered to that address, and what it says.
To stop them, turn reminders off on your profile, use the unsubscribe link in any reminder email, or block the site's notifications in your browser. Turning notifications off for a device deletes its push address; a push address the browser reports as expired is deleted too.
Usage counts
To learn which parts of the app people use, we count a short, fixed list of things per account per day: visits to the home screen, play, puzzles, the game archive, a review, the openings and the profile; a review being opened; a drill being finished; and a checkout being started. What is stored is the name of the thing, the date (in UTC) and how many times it happened — for example “home screen, 29 September, 3”.
Nothing else goes with it: no IP address, no device or browser details, no page addresses, no games or moves. These policy pages aren't counted. The counts are our own; there is no third-party analytics or advertising code in the app.
Why: our legitimate interest in knowing which parts of the app are worth improving (art. 6(1)(f)), which we have weighed against yours: the counts are coarse, kept with your account and nothing else, and never shared. You can object at any time by turning usage counts off on your profile, and from then on nothing is counted for your account.
Lichess
Logging in to Lichess is optional. It uses Lichess's own login page, and the only permission the app asks for is to play games on your behalf. Lichess gives the app a token, which is kept in this browser only — it is never saved to your account or sent to our servers. Logging out deletes it and asks Lichess to revoke it.
While you are logged in, the app reads from Lichess your username, ratings and game counts, the games you are playing, the moves of a game as it is played, and your list of past games when you look for one to review. Puzzles are fetched from Lichess's public puzzle service without logging in. All of this goes straight from your browser to lichess.org, so Lichess sees those requests as it would any visit, and its own privacy policy applies to them.
chess.com
Linking chess.com doesn't log you in to anything: you tell the app which chess.com username is yours, and it is saved in your profile. The app then reads that player's public information from chess.com's published data service — the profile (username, title, join date and profile link), ratings, and the monthly lists of their games — straight from your browser. chess.com sees those requests, and its own privacy policy applies to them.
Who else handles your data
These companies process data for us, under contract, and only to run the app:
Google (Firebase Authentication and Cloud Firestore): sign-in, and the storage of your account and its data, in the EU. Vercel: serves the app's pages and runs its server code, and keeps standard server logs — IP addresses, the pages requested, the time — for a short period under its own policy, to run and protect the service. Stripe: payments. Mailjet: sending email. Your browser's push service (Google, Mozilla, Apple or Microsoft): delivering notifications, if you turn them on.
Your account's data is stored in the EU, but we are in the United States, and some of these companies are based in, or may reach your data from, the United States too. Data that goes to the United States goes under the EU–US Data Privacy Framework, for the companies certified under it, or otherwise under the European Commission's standard contractual clauses. We don't sell your data or share it with anyone for advertising.
How long we keep it
Your data is kept for as long as your account exists. An anonymous account that hasn't been used for 12 months is deleted, with everything saved under it. Payment and invoice records are kept for as long as tax law requires (for EU VAT, ten years), even after an account is deleted. Push addresses are deleted when you turn notifications off or the browser reports them expired.
You can delete your account yourself, from your profile: it deletes the account and everything saved under it. If you have Pro, cancel it first so you are not charged again. Stripe keeps its own payment records for as long as the law requires.
Your rights
You have the right to access your data and get a copy of it, to have it corrected, to have it erased, to take it with you in a portable form, to object to how it is used — including to the usage counts — and to restrict its use while a question about it is settled. Where something is based on your consent, such as reminders, you can withdraw it at any time, which doesn't affect what was done before.
To use any of these rights, write to ashe.wooo@gmail.com from the address you signed in with, or include the account details shown on your profile. We will answer within one month, as the law requires; if a request is complex we may take up to two more months, and will tell you why within the first.
If you think we have handled your data wrongly, you can complain to the data protection authority of the EU country where you live or work, or where you think the problem happened; the European Data Protection Board lists them all (edpb.europa.eu). We would rather hear from you first, and try to put it right.
Changes to this policy
If what the app collects changes, this page changes with it, and the effective date at the top will say when. If a change matters to you, we will say so in the app before it applies.