Privacy policy
This page explains what data ChessAthletes processes, what stays on your device, and what is handled by third-party providers like Cloudflare, Supabase, or Stripe. This is a plain-English explanation, not legal advice.
Who runs ChessAthletes?
ChessAthletes is an independent project operated by an individual developer. Throughout this document, “we” refers to the person operating ChessAthletes. “You” refers to anyone using the website or the chess training tools.
What the trainers do with your data
ChessAthletes is built around the idea that training happens locally in your browser. This means:
- Your training input (answers, moves, settings) stays in your browser.
- Some trainers store preferences locally using
localStorage. - Your training content is not uploaded to our servers by default.
If you clear your browser data or switch devices, locally stored training data will not transfer with you.
Accounts & login (Supabase)
If you choose to create an account or log in, ChessAthletes uses Supabase for authentication.
Depending on how you log in, Supabase may process:
- Email address (for magic-link login),
- Account identifier and authentication/session tokens,
- For Google login: basic profile info provided by Google (typically email, name, and profile image), depending on your Google settings.
We use this information to let you sign in, keep you signed in, and to apply subscription access to your account. We do not sell account data and we do not use it for advertising.
Service-related emails
If you create an account or use features that require login, we may send service-related emails that are necessary for the functioning of ChessAthletes.
These emails may include:
- login or account-related messages (such as magic links),
- security or technical notices,
- subscription or billing confirmations,
- notifications about included usage or availability (for example, when free training minutes reset or become available).
These messages are factual and operational in nature. We do not send marketing or promotional emails unless you have explicitly opted in.
Free usage limits & anti-abuse
ChessAthletes offers a free tier (e.g., a limited amount of free training time per month) and needs basic anti-abuse protections. Depending on the tool, we may temporarily process:
- a random, anonymous browser ID,
- a hashed, non-identifiable version of your IP address,
- basic usage counters (e.g., seconds used in a month) to enforce the free limit.
This is used solely to prevent repeated overuse or attempts to bypass limits. It is not used for ads or profiling and is set to expire after a short period where possible.
Technical events & minimal analytics
We collect a small amount of metadata to keep the service working and understand broad usage patterns. This may include:
- events when you open certain trainers or reach a free usage limit,
- each event typically includes only the trainer name, an event type, and a timestamp.
These events may be sent to a small backend endpoint running on Cloudflare Workers. Cloudflare, as an infrastructure provider, may also log technical details (like IP address and user agent) for security, abuse prevention, and performance.
Previous subscriptions
Training is free and no new subscription is required. Stripe may retain records from previous subscriptions and provide billing management for existing customers. We do not store full card details.
Cookies, local storage & similar technology
ChessAthletes uses browser storage (like localStorage) and cookies to:
- store trainer settings and local training data,
- enforce free-tier usage limits,
- keep you signed in (session tokens) when you use login,
- remember your sign-in session.
Clearing your browser data will remove local trainer progress and may sign you out. Some access state may be restored after you log in again (for example, if your subscription is active).
Third-party services (like Stripe, Supabase, or Cloudflare) may use their own cookies when you interact with their systems.
Legal basis (EU/EEA users)
Where applicable (for example under GDPR), we process personal data under one or more of these bases:
- Contract: to provide login, subscription access, and service-related communications you request.
- Legitimate interests: to secure the service, prevent abuse, and understand basic usage trends.
- Legal obligations: for payment/accounting records where required.
- Consent: in limited cases where you actively opt in (if introduced in the future).
How long we keep data
- Local trainer data: stays on your device until you delete it.
- Account data (Supabase): kept while you maintain an account, unless you request deletion.
- Subscription/payment records (Stripe): retained according to Stripe and any legal/accounting needs.
- Anti-abuse identifiers / usage limit data: kept for the shortest practical period needed to enforce limits and protect the service.
- Infrastructure logs: Cloudflare may retain logs under their own retention policies.
- Service communications: emails related to your account or usage are sent only while your account is active or relevant.
Security
We use reputable providers (Cloudflare, Supabase, Stripe) and standard security practices. No method of transmission or storage is 100% secure, but we aim to minimize collected data and limit access.
Your choices & rights
You can:
- Clear browser storage at any time (removes local progress and may sign you out).
- Use private/incognito mode for temporary sessions.
- Cancel your subscription at any time via Stripe’s billing portal (where available).
If you live in a region with data protection rights (such as the EU), you may request access to, correction of, or deletion of personal data we hold about you. This typically includes:
- your account data stored via Supabase (email, account identifiers),
- subscription-related information available to us via Stripe,
- any emails or support requests you send us.
Contact
If you have questions about privacy or data use, contact:
- Email: contact@chessathletes.com
This privacy policy may be updated as ChessAthletes evolves. Significant changes will be reflected on this page.