We adhere to data minimization principles, collecting only what is strictly necessary to run the Service:
Parental Approval Required: Any user under 13 is locked out of the site completely and cannot use any features at all until their parent registers and consents to the Terms and Privacy Policy via the Parent Portal.
Standard Telemetry & Metrics Tracking: Once parental consent is granted (for users under 13) or upon registration (for users 13 and older), we collect standard gameplay metrics (such as puzzle progress, moves, and timing) and system telemetry for all users alike. This data is used solely to power the AI coach, track learning progress, and improve the application. We never use telemetry data for micro-targeting, marketing, or advertising.
Sharing with Chess Coaches: Parents select and approve specific chess coaches for their children under 13. Players 13 and older select their own coaches. Linked coaches are granted secure access to view the student's training telemetry, progress reports, and chess statistics solely to help guide their learning. Data is never shared globally or with unauthorized coaches.
Parental Consent Versioning: We record the exact version of the Parental Consent Agreement (e.g., Version 1.0) that you signed. If our terms change, we will prompt you to review and sign the updated version.
Restricted Communication & Chat: We do not collect or store any player chat logs or message history. Free-form text chat in online PvP matchmaking is completely disabled for children under 13, who can only see and use safe emoji reactions (they are blocked from seeing or typing text chat, creating support tickets, and entering any free-form text on the site). Users 13 and older have access to full chat in PvP matchmaking. The only chat information collected on the platform is submitted through the support page by parents/guardians.
PGN Data Export: You can export your entire uploaded game library as standard PGN files.
Account Deletion (Right to Erasure): You can delete your account at any time in Settings. Deletion permanently purges your profile, email, friendship connections, and gameplay history from our databases.
Authentication Security: Firebase Auth manages credential verification. We support Multi-Factor Authentication (MFA) to safeguard account access. We do not store, view, or have access to your account passwords. All passwords are encrypted and securely hashed by Firebase Auth using industry-standard cryptographic hashing (e.g., scrypt), making them entirely invisible to us.
MFA Phone Constraints: If you provide a phone number for MFA, it is strictly restricted to verification operations and will never be used for marketing or profiling.
We use third-party services on our platform to optimize user experience, analyze site performance, and serve context-appropriate advertisements. Please review our disclosures regarding these services below: