Privacy policy

Who to contact

ChessPuzzles.ai provides chess analysis and practice from your games. For privacy questions, access, correction, export or deletion requests, email support@chesspuzzles.ai from your account email address. We may ask for information needed to verify that the account is yours.

Information used to provide the service

• Account information: your email address, authentication records, linked chess usernames, preferences and subscription status.
• Chess and training information: public games retrieved for the Chess.com or Lichess username you enter, including opponents, ratings, moves and results; generated positions, analysis, explanations, attempts, hints and review dates.
• Billing information: Stripe customer and subscription identifiers, payment status and receipts. Stripe collects payment details through its payment interface; our application does not store your full card number.
• Technical information: operational logs, errors, browser and device information, network identifiers and feature usage used to run, secure and improve the service.
• Support information: messages and information you send when requesting help.

A chess username may be public. Entering one does not establish ownership of that chess account. Avoid sharing private information in game annotations or support attachments unless it is needed for your request.

How this information is used

We use this information to sign you in, retrieve and analyze games, create practice, save progress, schedule reviews, process subscriptions, deliver receipts, provide support, investigate failures and prevent abuse. Practice recommendations use observations from extracted positions and your training activity. They do not establish your ability or guarantee improvement.

AI explanation features send chess positions and supporting chess facts to an AI provider to generate the requested explanation. We do not need your payment card details for this processing. AI explanations can contain errors.

Service providers and disclosures

The service uses Supabase for accounts and stored application data; Stripe for payments; Resend for transactional email; Vercel and Google Cloud for hosting and computation; Anthropic for AI explanations; and PostHog and Vercel for configured diagnostics and usage analytics. Chess.com and Lichess receive requests to retrieve public games. Providers process information for their respective services under their terms and applicable agreements.

We limit sharing to providing and operating the service, responding to your requests, meeting legal obligations and protecting the service from abuse. We do not grant ourselves unrestricted rights to sell your personal data or use it for unrelated advertising. A change of business ownership may involve transfer of service records, subject to applicable requirements and notice.

Cookies and local storage

Authentication uses browser storage to keep you signed in. The trainer also stores preferences, daily-session state and results awaiting synchronization on your device. Clearing site data before those results finish syncing can remove them. Configured analytics may use identifiers to understand usage and diagnose errors. Session replay is disabled in this release.

Retention and your choices

Account, game and practice records are retained to provide your saved training history. Subscription cancellation stops renewal; it does not delete your account or training records. Contact support separately to request deletion or export. Billing, fraud-prevention and legal records may need to be retained after an account is deleted, and backup copies may take additional time to expire.

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of personal information, object to or restrict processing, withdraw applicable consent, or complain to a data-protection authority. Contact us to exercise these rights. Any exceptions will be assessed under the rules that apply to your request.

Security, processing locations and children

We use access controls and other technical safeguards to protect account and training records. No online service can promise that data will never be lost or accessed without authorization. Our providers may process information outside your country; applicable safeguards depend on the service and location.

The service is not intended for children under 13. If you believe a child under 13 has provided personal information, contact support so we can investigate and remove it as required.

Changes

We will update the date on this page when this policy changes and provide additional notice when a material change or applicable rule requires it.