Privacy Policy

1. Controller

The data controller responsible for data processing on this website is:

Max Mustermann
Musterstr. 1
10115 Berlin
Germany

Email: support@schach.ai

2. Overview of Data Processing

We process personal data only to the extent necessary to operate the platform and provide the chess learning service. Data may be processed for the following purposes: operating and improving the website, saving game progress, providing chess training features, preventing abuse or misuse of the platform, processing subscriptions (future feature), and complying with legal obligations.

We do not sell personal data to third parties.

3. Legal Basis (GDPR)

Processing is based on the following legal bases under Article 6 GDPR:
Article 6(1)(a) — Consent,
Article 6(1)(b) — Contract performance,
Article 6(1)(f) — Legitimate interest (service security and improvement).

If the service is used by children, parental consent may be required depending on the user's age.

4. Data Collected

Depending on how you use the service, the following categories of data may be processed.

Technical Data

When visiting the website, technical information may automatically be processed, including: IP address, browser type and version, device type, operating system, pages visited, and time of access. This information is used to ensure the security and stability of the website.

Game and Learning Data

When interacting with the chess platform, we may process: chess moves, puzzle performance, training progress, and earned achievements or levels. This data helps provide adaptive learning and personalised feedback. Game data may be stored locally in the browser or in our database once user accounts are available.

Account Data (Future Feature)

If user accounts are created in the future, we may collect: email address, username, account preferences, and saved progress. Authentication services may be provided by third-party services, which only securely manage login credentials and identity verification.

Subscription and Payment Data (Future Feature)

If a paid subscription is purchased, payment processing will be handled by a third-party payment provider. The payment provider may process: billing name, payment method, transaction details, and billing address (if required). schach.ai does not store credit card information. The payment provider processes payment data independently according to their own privacy policy.

5. Hosting

The website is hosted by a third-party hosting provider. The application's server infrastructure is deployed in the European Union (Frankfurt, Germany). The hosting provider may process technical data such as IP addresses and request logs to ensure reliable website operation.

6. Chess Engine Processing

The chess engine used in the application (Stockfish WASM) runs directly inside the user's browser. Chess analysis is performed locally on the user's device, and chess positions are not sent to external servers for analysis.

7. Third-Party Content Sources

The platform may load puzzle positions or educational chess content from publicly available sources such as the Lichess puzzle database. Only chess position data is retrieved. No personal user data is shared with these services.

8. Analytics

This website uses privacy-focused analytics tools to collect anonymised usage and performance data. These tools help us understand how the website is used and identify performance issues. No personally identifiable information is collected through these services. The data collected includes page views, navigation patterns, and page load metrics.

9. Children's Privacy

schach.ai is designed as an educational platform for children. We take special care to protect children's privacy: no public chat features, no targeted advertising, minimal data collection, and a safe learning environment. If accounts are introduced in the future, parental consent mechanisms may be implemented for younger users. Parents may request deletion of a child's data at any time.

10. Data Storage Duration

Personal data is stored only as long as necessary for the purpose it was collected. Technical logs are retained briefly for security purposes. Game progress is stored until deleted by the user or upon account removal. Account data is retained until the user deletes their account.

11. User Rights

Under GDPR you have the following rights: right of access (Art. 15), right to rectification (Art. 16), right to erasure (Art. 17), right to restriction of processing (Art. 18), right to data portability (Art. 20), and right to object to processing (Art. 21).

To exercise these rights, contact: support@schach.ai

12. Security Measures

We implement appropriate technical and organisational measures to protect personal data, including: encrypted HTTPS connections, secure hosting infrastructure, controlled access to systems, and minimal data collection.

13. Changes to This Policy

This Privacy Policy may be updated if the platform introduces new features or legal requirements change. The current version is always available on this page.