Privacy Policy

Account: your email address and password. The password is kept by our sign-in provider only as a one-way hash, so no one, including us, can read it. For each device you are signed in on, the provider also records its IP address and browser type, to secure that session until you sign out.

Chess: the Chess.com or Lichess usernames you link and our analysis of the games those sites publish for them, to produce your reports.

Billing: your Stripe customer reference, subscription status and renewal date, and a record of any snapshot you buy. Stripe handles payment; we never receive card numbers.

Usage: how often your account uses the data features, kept up to 10 days, to enforce fair-use limits.

Site statistics: cookie-free counts of visits and page load times, to improve the site.

Email you send us: kept until the matter is resolved.

We need your email address to give you an account, and Stripe needs your payment details for a subscription or purchase; without them we cannot provide the Service.

Legal bases (for users in the EU and UK): our contract with you for your account, reports and billing; our legal obligations for billing records; and our legitimate interests in protecting the Service, improving the site, answering you, and analyzing public game records.

Subscribers can request a report on any chess username. For that username we process the games Chess.com and Lichess publish through their public APIs, to compare its play with players of similar rating. We also analyze a sample of other players' public games from both sites to work out what is typical at each rating. A report is deleted with the account that owns it; the games and our analysis of them are kept for reuse while they remain useful to the Service.

If an account requests data at a rate that indicates automated access, its access to the data features is paused automatically. You can contact us to request a manual review. We make no other fully automated decisions with legal or similarly significant effects on you.

We share personal data with service providers that help us operate the Service: providers of database and sign-in services, hosting and site statistics, cloud computing and backups, payment processing, anti-bot and security services, and transactional email. Some providers may also process limited data for their own fraud-prevention, security, legal-compliance or service-improvement purposes under their own privacy notices. We may also disclose data when required by law or in connection with a sale or transfer of the Service.

We process data in the United States. Where our service providers transfer EU or UK data between countries, they rely on safeguards the law recognizes, such as the EU Standard Contractual Clauses, the UK's own transfer mechanisms, or their participation in the EU–US Data Privacy Framework and its UK extension.

Account data is kept while your account exists, and your reports stay readable after a subscription ends. Deleting your account erases your account, email address, chess username links, reports, history and practice decks at once, and encrypted backup copies are gone within 30 days. The public games of the chess usernames you linked and our analysis of them are stored apart from your account and kept as described in section 2. Server logs, which can include IP addresses and chess usernames, are kept up to 30 days. The alerts the Service sends us, and our records of billing events such as refunds and disputes, can include an account identifier and a Stripe customer reference: alerts are kept up to 90 days and billing records up to 180 days, including after the account is deleted.

Depending on where you live, you may have the right to access, correct, delete, restrict or receive a copy of your personal data, and to complain to your data-protection authority. To make a request, email us, or delete your account from your account page.

You have the right to object at any time to our processing of your personal data based on legitimate interests. To do so, email us.

We use only the cookies and browser storage the Service needs to work, such as keeping you signed in; none are for statistics, advertising or tracking. Your browser's Do Not Track setting changes nothing here, because we do not track you across other websites and no one else does through ours.

We may update this policy from time to time. If a change is material, we will notify account holders by email at least 7 days before it takes effect.