Privacy Policy

Last updated: September 6, 2026

1. Data We Collect

When you sign in via OAuth (Google, Lichess, etc.) we receive your username, email address, profile picture URL and the provider's stable account identifier. We store this to identify your account. If Google and Lichess provide the same verified email address, we may connect both sign-in methods to the same Chess Genie account so your progress and subscription stay together. We also store your training history (positions attempted, moves made) to power the training features. If you create an account with an email address and a password, we store the address and a salted, hashed form of the password (scrypt) — never the password itself, and we never email it to you.

2. How We Use Your Data

Your data is used solely to operate and improve the ChessGenie service. We do not sell or share your personal data with third parties except as required to process payments (Stripe) or comply with law.

Email and marketing consent

We send marketing email only to people who explicitly asked for it. If you enter your address and tick the consent box, we store that address, the time you consented, and where you subscribed from, and we use it solely to send the updates you agreed to. This is separate from the email address attached to your account: an address we receive from an OAuth provider is used to identify you and is never added to the mailing list. Every email includes a one-click unsubscribe, and you can withdraw consent at any time by contacting us.

3. Stripe Payments

Payment processing is handled by Stripe, Inc. When you subscribe, Stripe stores your payment details. We only receive a customer reference ID - we never see or store your card number. Stripe's privacy policy applies to payment data.

4. Your GDPR Rights

Under EU law (GDPR) you have the right to access, correct, or delete your personal data. You may also request a copy of your data or withdraw consent at any time. To exercise these rights, contact us at the address below.

5. Cookies

We use cookies to keep you logged in, including a session cookie and, for guest accounts, a guest token cookie. We also use Google Analytics to understand site usage. We do not use advertising cookies.

6. Contact

For privacy requests or questions, contact us at: