The short version
1.Introduction & Scope
ChessSolve (“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy applies to the ChessSolve browser extension, our website at chesssolve.com, our analysis tools, and our APIs (together, the “Service”). It explains what we collect, how we use and share it, and your rights.
This policy does not cover third-party websites you visit alongside the Service (such as Chess.com or Lichess). Those platforms have their own privacy policies, and we encourage you to read them.
2.Who We Are (Data Controller)
For the purposes of the EU/UK General Data Protection Regulation (“GDPR”), ChessSolve is the data controller for personal data processed through the Service. You can reach us regarding privacy at contact@chesssolve.com.
3.Data We Collect
We collect the following categories of data:
- Account data — your email address, username, and a securely hashed password when you register. We store email verification and password-reset tokens to keep your account secure.
- Chess & game data — the positions and moves you submit for analysis, puzzles you attempt, and results. This may be saved to provide features such as analysis history and progress tracking.
- Usage data — counts such as daily and total analysis requests, puzzle statistics and rating, streaks, last-activity dates, and which features you use, so we can enforce fair-use limits and improve the Service.
- Subscription & billing data — your plan status (free, Plus, or Premium), subscription state, and identifiers from our payment processor. Card payments are handled by Stripe; we do not receive or store your full card number.
- Communication & preferences — messages you send us, your marketing-email consent, and unsubscribe status.
- Technical data — IP address (used for rate limiting and abuse prevention), browser type, device/OS information, and standard server logs.
- Analytics data — if you consent, aggregated usage analytics via Google Analytics (see Section 7).
4.How the Extension Handles Data
The browser extension requests only the permissions it needs to work: access to the active tab and local storage. When you run analysis on a supported chess website, the extension reads the current game’s moves from the page and sends that position to our servers to return engine analysis.
What the extension does and doesn't do
- It only activates on supported chess sites and only reads the chess position needed for analysis.
- It stores your login token and settings in your browser’s local storage on your device.
- It does not read your browsing history, passwords, or content on unrelated websites, and it does not track you across the web.
5.How We Use Your Data
- To provide, operate, maintain, and improve the Service;
- To run engine analysis on the positions you submit;
- To manage your account, authenticate you, and keep it secure;
- To process subscriptions, billing, and related paid features;
- To enforce usage limits, fair use, and to detect, prevent, and address abuse, fraud, and security issues;
- To respond to your messages and provide customer support;
- To send service and, where you have consented, marketing emails;
- With your consent, to measure and analyze aggregate usage of the Service;
- To comply with legal obligations.
6.Legal Bases (GDPR)
If you are in the EEA or UK, we rely on the following legal bases:
- Performance of a contract — to provide the Service you sign up for (accounts, analysis, subscriptions).
- Legitimate interests — to secure the Service, prevent abuse, enforce limits, and improve our tools, balanced against your rights.
- Consent — for analytics cookies and marketing emails. You may withdraw consent at any time.
- Legal obligation — where we must process data to comply with the law.
9.International Data Transfers
We and our service providers may process your data in countries outside your own, including outside the EEA/UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent mechanism to protect your data.
10.Data Retention
We keep your personal data for as long as your account is active or as needed to provide the Service. If you delete your account or ask us to delete your data, we will delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with a legal obligation, resolve disputes, or enforce our agreements. Some technical logs and aggregated, non-identifying statistics may be retained for security and analytics.
11.Security
We use reasonable technical and organizational measures to protect your data, including password hashing, encrypted connections (HTTPS), access controls, and rate limiting. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
12.Your Privacy Rights
Depending on your jurisdiction (including under the GDPR), you may have the right to:
- Access — obtain a copy of the personal data we hold about you;
- Rectification — correct inaccurate or incomplete data;
- Erasure — request deletion of your personal data (“right to be forgotten”);
- Restriction & objection — restrict or object to certain processing, including processing based on legitimate interests;
- Portability — receive your data in a portable, machine-readable format;
- Withdraw consent — withdraw analytics or marketing consent at any time, without affecting prior processing.
To exercise these rights, contact us at contact@chesssolve.com or via the Contact page. You also have the right to lodge a complaint with your local data-protection authority.
13.US State Privacy Rights (CCPA)
If you are a California resident (or a resident of another US state with comparable law), you have the right to know what personal information we collect, to request access to or deletion of it, to correct it, and to not be discriminated against for exercising these rights. We do not sell personal information and do not “share” it for cross-context behavioral advertising. To exercise these rights, contact us at contact@chesssolve.com. Where your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of analytics cookies.
14.Children's Privacy
The Service is not directed to children under 13 (or under 16 where a higher age of digital consent applies), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us at contact@chesssolve.com and we will delete it.
15.Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Effective” and “Last updated” dates above. For material changes, we will provide additional notice (for example, by email if you are subscribed, or a notice on the website).
16.Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at contact@chesssolve.com or via our Contact page.