Privacy Policy

Last updated: November 6, 2026

Chess Academy is a chess game made by an independent developer. This page explains what we keep about you, why, who processes it, and how you delete it. For any question about your data, write to nrs1403@gmail.com.

1. What stays on your device only

Playing against the computer works without an account. Your browser storage on your device keeps your settings, your progress in lessons, puzzles and the coach, your “My games” list, and the current game against the computer. The chess engine runs on your device, so your moves against the computer are never sent to a server. The game also stores its files on your device so it works offline.

2. What we keep when you play as a guest or create an account

• Guest: an account with no email and no name, holding your player ID and progress.
• Email account: your email, to sign in and to reset your password. Your password is stored as a one-way hash that nobody can read, including us.
• Sign in with Google: Google sends us your name, email and picture. We use them only to sign you in, and your Google name is shown to you alone; friends see your player ID or the nickname you choose.
• Your game profile: your player ID, your nickname if you choose one and its change history, your age group (under 13, 13 to 17, or 18 and over) worked out from your birth year without keeping the year, when you accepted the Terms of Use, your progress and settings so you find them on all your devices, and your rating, number of games and results.

3. Friends and online play

• Friend requests, your friends list, and the players you block.
• When you were last seen, so friends can see you are online. You can hide it on the Friends screen.
• Your online games: the moves, the clock and how long each move took, and the result. In rated quick games your rating changes afterwards, and your opponent sees your rating.
• In-game chat messages: deleted automatically after 30 days, and filtered before sending to block offensive words, links and phone numbers. Players under 13 can only send the ready-made phrases. You can turn chat off in Settings.
• Notifications (if you turn them on): your device's address at its browser's notification service, its encryption keys, and the text language, so we can tell you about challenges, your move, friend requests, room invites and a reminder five minutes before a tournament you joined starts, while the game is closed. The notification text is encrypted for your device alone, so the service carrying it cannot read it. We keep what was sent for one day to avoid repeats. Turn them off in Settings; they also stop when you sign out on that device.
• Player Arenas: your live online game appears to account holders in Player Arenas (both names and ratings, and the board), and anyone can enter to watch its moves, read and write in its chat, and see who is on stage and speaking. Turn this off in Settings (“Show my games in Player Arenas”) so only your friends and your opponent’s friends see it. Games of players under 13 are for the players’ friends only, and they cannot go on stage.
• Checking that you are not a robot: when you create an account, sign in, continue as a guest or reset your password, Cloudflare Turnstile checks that the request comes from a person, so fake accounts cannot be created by the thousand and passwords cannot be guessed. For this, Cloudflare sees your device’s internet address and some browser data at the moment of the check only; it sets no tracking cookies, and never receives your name, email or anything about your games.
• Your profile as others see it: when an account holder taps your name in friends, the leaderboard or a tournament, they see your nickname, ID, picture, its frame and your title, the month you joined, your rating in each time control, your online results, your official tournament medals, and your last ten online games (the opponent’s nickname and picture, your colour, the result, the time control, the number of moves and the day). Only your friends see your recent games and results if you turn off “Show my games in Player Arenas” or you are under 13. Players you blocked, or who blocked you, cannot see your profile, and an opponent who blocked the viewer does not appear in your games.
• Tournaments: when you join a tournament, its standings show everyone who opens it your nickname, ID, picture, rating, points and number of games. The daily tournament is open to account holders; a private tournament that a player creates for friends is open to its creator and their friends only, and shows the creator’s nickname, ID and picture. A tournament and its results are deleted 90 days after it ends, except your medals (first, second and third place), which stay with your account and show in “My account” until you delete it. If the creator of a private tournament deletes their account, the tournament and the results of those who played stay, without the creator.
• Stage voice: when you turn your mic on on stage, your voice goes straight from your device to the devices of the people in the game. It does not pass through our servers and is never recorded or stored. Because the connection is direct, each connected device learns the other’s network (IP) address, as in any direct internet call (only those on stage and the devices they connect to, not everyone in the game). To find a route for the connection, your device asks a STUN server at Google or Cloudflare for its public network address, so they receive your IP address only, not your voice or your account. Players under 13 neither speak on stage nor hear it.
• Rooms: the rooms you open or join, when you were last in them, and room chat messages with the sender's player ID and nickname, deleted after 30 days. Room members see your player ID, nickname and rating, whether you are in the room now (unless you hid your status), and the room's game, and the host can mute or remove anyone.

4. Reports and security

• For fair play we note what looks like automated play (inhumanly regular timing, or a big rating jump) for the game's team to review, with no automatic penalty.
• When you report a player we keep the report for review: who reported, whom (their player ID and nickname at the time), the reason, what you wrote, and a copy of the game's messages when the report is about chat. If someone reports you, this is what their report keeps about you. A report is kept for 180 days and then deleted, even if either of you deletes their account in the meantime, because the review needs it (so nobody can erase a violation by deleting their account).
• To protect accounts from password guessing we keep sign-in attempts and the network (IP) address for one day, then delete them automatically.
• Error reports: when something goes wrong in the game, a technical description (the error text, the page, the version, and the browser and device type) is sent with your account if you are signed in, so we can fix it. They are deleted after 30 days.

5. Why we use your data

To run your account and sign-in, save your progress, let you play with friends, protect children, and prevent abuse and cheating. We do not use it for ads and we do not sell it.

6. Who processes your data for us

• Supabase: the database and accounts.
• Netlify: hosting for the game's website, which keeps technical access logs such as IP addresses to protect the site.
• Google: if you choose to sign in with your Google account.
• Cloudflare Turnstile: checks that you are not a robot when you create an account or sign in, so it sees your device’s internet address and some browser data at the moment of the check only.
• Google and Cloudflare (STUN servers): when your device connects to stage voice, it asks one of them for its public network address so it can reach the other devices; they receive your IP address only, not your voice or your account.
• Your browser's notification service (Apple, Google, Mozilla or Microsoft): carries notifications to your device if you turn them on, encrypted so it cannot read them.

These companies' servers may be outside your country. We do not give your data to anyone else unless the law requires it.

7. Children

The game asks for your birth year to give each player what suits their age, and keeps only the age group. Players under 13 cannot type chat messages, only send ready-made phrases. We recommend that they use an account with a parent's permission and supervision. A parent can delete their child's account from “My account”, or write to us.

8. How long we keep it

• Your account, progress, friends and games: until you delete your account.
• A guest account not opened for a full year that never played anyone: deleted with everything in it. Your progress stays on your device and moves to your new account if you come back.
• Game invitations that got no answer, were declined or were cancelled: 30 days.
• Chat messages: 30 days, deleted automatically every day.
• Sign-in attempts and IP addresses: one day.
• Error reports: 30 days.
• Notification subscriptions: until you turn them off or sign out on that device, or 90 days without opening the game. Sent notifications: one day.
• Tournaments: 90 days after they end, except your medals, which stay with your account until you delete it.
• Reports: 180 days, then deleted. If you delete your account it is unlinked from them, but the reported player’s ID and nickname and the copied messages stay until the period ends.
• Fair-play notes and previous nicknames: 180 days, or earlier with your account.

9. Your rights

• Access and correction: see your data in “My account” and change your nickname.
• Deletion: go to “My account”, then “Delete account”. Your account, profile, friends, requests, online games and their messages, your rooms, your room messages and your medals are deleted at once; a shared game is deleted for your friend too. A private tournament you created stays with the results of those who played, without your name. Reports stay for their period as in section 8.
• Data on your device: clear it by clearing this site's data in your browser settings.
• Questions or objections: write to nrs1403@gmail.com.

10. Changes

If we change this policy we update the date at the top of this page, and we tell you about any important change.