Legal

Privacy Policy

Last edited 31 July 2026

This page explains what chess chess chess stores about you, why, and how long it keeps it. It was written by reading the code, so it describes the software as it is rather than as a template imagines it. The operator is [OWNER LEGAL NAME] and privacy questions go to [CONTACT EMAIL]; those are not recorded anywhere in this software, so they are left blank rather than invented.

The short version

• We store your email address, a username, a display name, and everything you do in the game.
• We do not run advertising, and we do not sell or share your data with anyone for their own purposes.
• There are no third-party analytics, trackers, or advertising scripts in the app.
• You can delete your account from account settings, and it really deletes.

Where your identity comes from

Sign-in is handled by ChatGPT. We never receive or store a password. Each signed-in request arrives carrying your email address, and optionally your full name. The first time we see an email address we create a profile: we store the email address, a username derived from it, and a display name taken from your full name if it was supplied. Your account id is a hash of your email address. You can change the username and display name later.

What we store

Your profile. Email address, username, display name, and:

• ratings (overall, Pure, Chaos, and the highest each has reached) and your win/loss/draw counts;
• tokens, style points, and the card-drop counter that guarantees a rare card eventually;
• the cards you own, the deck you selected, and the custom cards you forged;
• cosmetics you own and have equipped — theme, board skin, piece skin, name effect;
• when the account was created, last updated, and last active.

Your games. While a game is being played we store the whole room:

• the full game state — board, clocks, decks, cards played, mini-game state;
• the complete move-by-move history, as a snapshot of all 64 squares per ply;
• the in-game chat between the two players;
• the seat each account holds and when each side was last seen connected.

When a game finishes it is also written to a permanent record: both players’ ids and names, the result and how it ended, the ratings before and after, the variant, the time control, the move list, the event log, and the per-ply board history.

Everything else you do. Friendships and friend requests, matchmaking queue entries, challenges you send or receive, board maps you publish, and the ephemeral position snapshots two players exchange during a live 3D mini-game round.

We also keep an aggregate count of how often each card is used, won with, and lost with, per variant. That table holds no account identifiers — it is card totals only, used for balance.

What we do not store

• No passwords: sign-in never gives us one.
• No payment details: nothing on the site can be bought with money.
• No stored IP addresses. The public price ticker is rate-limited per client address, but that counter lives only in a server’s memory and is never written to the database.
• No advertising identifiers, and no third-party analytics or tracking scripts.

Cookies and local storage

The app sets no cookies of its own. Signing in is handled by ChatGPT, which may set its own. Your browser’s local storage holds your preferences and reconnection tokens — sound on or off, accessibility mode, your last time-control choice, computer-opponent settings, board maps you are drafting, and a token per game room so you can reload without losing your seat. That data stays on your device; clearing your browser data clears it.

Who else sees it

• Your opponent sees your display name, rating, cosmetics, the moves you make, and anything you type in chat.
• Other players can find you by username or display name, see you on the leaderboards, and play board maps you publish.
• Our hosting provider (Cloudflare) runs the servers and the database, and therefore processes the data on our behalf.
• Coinbase receives one request when the site needs a BTC-USD price for the price ticker and for the Satoshi’s Wager card. That request is made by our server and carries nothing about you.

We do not sell your data, we do not share it for anyone else’s marketing, and we run no advertising.

How long we keep it

• Live game rooms: a finished room’s working copy is deleted 7 days after its last update, once its permanent record exists. That is what removes the room’s chat log and its full state blob.
• Per-ply board history: a finished game’s move-by-move board snapshots are released 90 days after the game ended. The move list and the event log are kept indefinitely, so the game stays readable in your history.
• Your profile and everything attached to it: kept until you delete your account.
• Invitations and queue entries: pending challenges expire after 24 hours; matchmaking entries disappear when you stop waiting.

The clean-up runs opportunistically in the background, at most about once every 6 hours per server, and processes a bounded batch each time. So deletion happens shortly after a window passes rather than exactly on the hour.

Deleting your account

Account settings has a delete option; it asks you to type a confirmation phrase first, because it cannot be undone. When you confirm:

• your profile is deleted — email address, username, display name, ratings, tokens, cards, cosmetics, and the record of every reward you were granted;
• your friendships, friend requests, challenges, matchmaking entries, forged custom cards, and published board maps are deleted;
• your game rooms are deleted, including their chat logs. Any game still in progress ends;
• finished games are anonymised, not destroyed. The record belongs to your opponent too, so it stays in their history with your side’s account link removed and your name replaced by “Deleted player”. It no longer appears anywhere as yours.

One honest caveat: because your identity comes from ChatGPT rather than from a password we hold, signing in again with the same email address creates a brand-new, empty account. It does not restore anything — the old data is gone — but it does mean deleting your account is not the same as blocking future sign-ins.

Your rights

Depending on where you live you may have the right to access, correct, export, or erase your personal data, and to object to how it is used. You can change your username and display name in account settings, export any of your games as a PGN file from your game history, and delete your account yourself. For anything else, write to [CONTACT EMAIL]. If you are in a place with a data-protection authority, you also have the right to complain to it.

Children

The service is not intended for children under [MINIMUM AGE]. If we learn that an account belongs to someone below that age, we will delete it.

Changes to this policy

If we change what we collect or how long we keep it, we will update this page and the date at the top. Where a change is significant, we will try to say so in the app rather than only here.