Privacy policy

Account data. Your email address and the preferences you set. Authentication is handled by Supabase; we never see or store your password.

Your chess. The games you play here, the puzzles you solve, your play and puzzle ratings, your opening repertoire and its revision schedule, and the coach's notes on your recurring mistakes. If you import games from Lichess or Chess.com, the imported PGNs are stored the same way. They are your data: we do not share them, mine them for anything beyond showing you your own progress, or keep them after you delete them.

Playing without an account. Signed out, all of the above stays in your browser's local storage and never reaches us. Signing in is what syncs it across devices.

Analytics. Vercel Analytics, which is cookieless and counts page views in aggregate without building a profile of you. No advertising pixels, no fingerprinting.

Supabase session cookies, first party, to keep you signed in. That is the lot; there are no tracking or advertising cookies. Your theme, board colours, sound and layout preferences are stored in your browser's local storage and never leave your device.

In UK GDPR terms, and in plain English: we process your account and your saved chess data because you asked us to, that is the service (performance of a contract). We process security logs and aggregate analytics because a site has to be kept running and safe (legitimate interests). We send optional emails only where you opted in (consent), and every one carries a working unsubscribe. This is a summary of our approach, not legal advice.

Supabase stores the database and handles sign-in. Vercel hosts the site. If you import games, we fetch them from the public APIs of Lichess or Chess.com using the username you give us, and send them nothing about you. Nobody gets your data for advertising, and we do not sell or rent it to anyone.

Your account and your saved chess data live as long as your account does, and are removed when you delete the account or ask us to. Server logs rotate on short schedules set by our hosts. Anything held only in your browser is gone the moment you clear your site data or sign out.

You can ask what we hold, get a copy in a usable format, correct it, or have it deleted. Settings has a one-click export and a delete-account button that does exactly what it says. If you would rather ask, email hello@chessranger.com and we will action it within 30 days, usually much faster. If you are in the UK and unhappy with our answer, you can complain to the ICO.

If this policy changes materially, the date at the top changes and the previous wording remains available on request. We will not quietly weaken it.