Privacy Policy

The controller is Tomasz Bazelczuk IT, Grupy AK Północ 4/93, 00-713 Warsaw, Poland. Tax ID (NIP): 8231563285. Contact support@chessexpert.io for privacy questions or requests.

Firebase assigns every profile an ID, including guests without email. Activity and records link to that ID: guest use is not anonymous. Optional website Google sign-in uses your ID and email. Your name and profile photo are not required, though Firebase Authentication may receive or retain basic Google profile information. Linking an unused Google account keeps the guest ID; it does not automatically merge separate app or extension profiles.

Connecting extension 4.0.4 uses private temporary connection records: the requesting and confirmed profile IDs, connection state, times and hashed connection codes. Rate-limit records prevent repeated connection requests. This relay does not store sign-in tokens. Connection codes stop working after five minutes; expiry alone does not delete database records. A database cleanup policy must be configured before this connection service is released.

After you agree to the Terms and acknowledge this policy at Google sign-in, we record your final ChessExpert profile ID, document versions, statement and time. This is separate from analytics consent.

An existing Google account opens after an empty-profile check or your choice to merge or continue without merging. A merge records the profile association and progress for retry, copies the initial supported study set and transfers selected history without overwriting Google study or deleting the source account or retained study records. Later guest records stay; interrupted transfers may need a same-account retry. PDFs, local progress, native profiles, pairing and privacy requests are excluded.

Continuing without merging is available only outside an active merge. Cloud guest records stay outside Google and may become inaccessible on this device. Finish uploads and merges in other tabs before switching.

Chosen screenshots, photos, video frames, board regions, PDFs and cropped diagrams may be uploaded and stored even with local recognition. The apps use camera or gallery images you choose. Extensions may capture a page, region or video frame when requested. Records include profile ID, source URLs and video timing, FEN, orientation, settings, status and timestamps. Study data includes positions, notes, tags, collections, references, solutions and progress. We keep opening requests, feedback and support messages to respond or investigate.

Photos support recognition and history, not a public gallery. Recognition and study records in the application are restricted to the owner or authorized administrators. Stored photos and PDFs can be read by anyone with their file URL, including pending uploads; file listing is blocked. Previous file links, external permissions and cached copies may remain accessible until separately invalidated; access changes cannot recall downloads. Avoid unrelated personal data or confidential documents.

Images are your choice, but recognition needs your selected image or diagram. Cloud features need a profile ID and necessary records; otherwise they cannot run. Google sign-in, launch interest and analytics are optional. Public pages need no Google sign-in, but hosting receives technical connection data to deliver them.

Saving interest records your current profile ID, campaign, page source and time privately; it may create a guest profile. No email is collected for this request, notifications sent, payment taken or access reserved. The profile owner and authorized administrators can read it. It is separate from analytics.

We remember requested profile-level interest and assess demand under our launch-planning legitimate interest, subject to your overriding rights. Switching or merging into an existing Google profile does not transfer it; linking without changing the ID keeps it. After the campaign we manually review, remove or reduce records no longer needed, subject to justified legal needs. You may request access or erasure.

Upload controls and Insights use server-owned plan and quota status. Insights shows 7 days for Free or 90 days for Pro, not a retention period. Private per-profile daily counters, operation IDs, image and request fingerprints, sizes and upload and settlement receipts enforce the shared allowance and prevent duplicate counting.

Updated Chrome counts server-accepted starts, including failures and cancellations, against the original profile and day. Same-operation retries count once; other web, PDF and native flows count successful cloud uploads against the same allowance. Results may be shown before image archival completes; archival failure does not refund a counted start. Merging history transfers neither quota ownership nor Pro entitlements. Private membership and deletion records apply saved-position limits and reconcile account changes and retries. Saves may exceed the limit during the Black Friday preview or a lossless merge; existing records remain afterward.

Requested processing serves the contract; necessary fraud and abuse prevention uses legitimate interests, subject to overriding rights.

Pro sales are not open. After launch and approval, Paddle is planned as authorised reseller and Merchant of Record, an independent data controller for checkout and purchase data, including customer contact, billing, payment, transaction and fraud-prevention information under its Privacy Policy. ChessExpert would receive the purchase reference and status and information needed to verify profile access, support customers and meet legal duties.

The public Pro page already loads Paddle.js and requests a Sandbox offer preview. Paddle receives your IP address and browser information and estimates country for a localized offer before checkout, independently of ChessExpert analytics consent. Our preview module does not send profile ID, email, images, positions or custom account data; Paddle may handle other technical data under its policy. The preview cannot purchase or grant access; the country used at a future checkout may differ from this estimate. Interest remains separate. See Terms and Refunds.

On the website and embedded extension pages, Google and Firebase Analytics start only after Accept analytics. Earlier activity is not backfilled, and chess features work if you reject analytics. Analytics is not anonymous: it can link your Firebase ID and profile records to navigation, captures, training, errors, source URLs, exercise IDs and moves, device and browser, language and approximate location.

Privacy settings lets you accept, reject or withdraw in this browser. Withdrawal stops future collection, not earlier data or accepted in-flight requests, and does not undo valid consent. Unavailable storage keeps analytics off in that tab. Rejection does not remove existing cookies: clear them in your browser. Clearing the choice prompts again; clearing site data can remove sessions, preferences or progress.

Sign-in, preferences, caches, local progress, uploads and cloud study records are separate from analytics. Mobile WebViews have no web analytics; updated native apps deactivate it. Older apps may collect until updated; updating does not erase prior data.

Google Firebase and Google Cloud provide authentication, hosting, databases, file storage and processing. Providers may process in different countries, including outside the European Economic Area; this is not an EEA-only service. See Firebase privacy information and data-processing terms. Optional Google Analytics has separate terms and privacy information.

Embedded YouTube videos, their thumbnails and external Google fonts may send your IP address and browser information to Google when requested. These content requests are separate from ChessExpert analytics and not all blocked by rejection. See Google Privacy.

When production error diagnostics are enabled, Sentry receives filtered errors, stack traces, release and broad surface labels for reliability and security. We do not intentionally attach profile IDs, images or positions, cookies, request bodies, browsing breadcrumbs or session recordings; performance tracing is off. Filtering cannot guarantee unexpected text has no personal data. Sentry can receive IP address, browser or connection metadata. This is separate from optional analytics. See Sentry Privacy.

Authorized administrators access records for support, security, recovery and requests. Providers receive necessary service data; Paddle receives preview data and would independently process future checkout data. Disclosure may be required by law or necessary for legal claims.

Provider documents describe safeguards such as applicable adequacy decisions or standard contractual clauses; the arrangement depends on the provider, service and transfer, not a promise of European-only storage. Contact support@chessexpert.io for applicable arrangements and copies of relevant safeguards.

• Recognition, analysis and saved-study requests: performing our service contract.
• Optional analytics: your consent, which you may refuse or withdraw.
• Localized offer previews and launch planning: legitimate interests in relevant offers and assessing demand, subject to overriding rights. Viewing is neither analytics consent nor a purchase.
• Requested pages, media and fonts: legitimate interest in technical delivery, subject to overriding rights; not a basis for optional analytics, extra third-party tracking or device access.
• Statutory privacy requests and applicable complaints: legal duties. We use your message and reply email for replies, ownership checks and handling evidence.
• Sign-in agreement records: necessary legitimate interest in evidencing Terms agreement and Privacy acknowledgement, subject to overriding rights.
• Security, operational diagnostics and support: necessary legitimate interests in reliability, access protection and problem-solving, subject to overriding rights.

Board recognition and allowance checks are automated tools for study and access to features, not solely automated decisions with legal or similarly significant effects. Contact us for review of access restrictions or errors.

Data does not automatically expire after a fixed period. We are introducing manual reviews to remove or reduce data no longer needed. Retention criteria include:

• Profiles and study data support continuing access and use. Images, PDFs and history support recognition, support and study; not every history record needs the original image.
• Logs and provider copies: technical, security or reporting needs and provider settings.
• Merge originals and copies: completion and recovery; minimal ownership mappings prevent duplicates or wrong access.
• Sign-in acknowledgements: evidence of versions and choices, legal duties or justified disputes.
• Rights requests and private notes: response evidence, follow-up or disputes. Legal duties or disputes may require longer retention.

Deleting a position does not automatically delete its upload or exercise; deleting a collection leaves contents. Sign-out, a new guest, cleared storage or uninstall does not delete cloud records and may lose access. Display limits are not deletion schedules. No single self-service export or erasure covers all account data.

Service, reporting and provider systems hold separate copies. Study deletion or analytics changes do not synchronize erasure automatically. Manual review covers associated profiles and those systems; removals need checking in each.

Where applicable, request access, correction, erasure, restriction or portability; object or withdraw consent. Email support@chessexpert.io or request for this browser’s existing profile.

The form requires a message and reply email and records type, profile ID, time and a private reference: keep it. Email is for handling, not marketing; an email or reference alone does not prove ownership. Only the current browser profile is identified. For another app, extension, profile or device or lost session, email platform and material details and available references; a new guest cannot identify the old one. Never send passwords or tokens. We may seek proportionate ownership evidence, not routinely identity-document copies.

Handling is manual. Private status and notes track progress; Completed does not prove erasure. Submission does not automatically send email, export records or delete data. We reply without undue delay, normally within one month; complex or numerous requests may take two more, with reasons notified within the first month. You may complain to a data protection authority.

We publish revisions with their date; review them periodically. If you disagree, contact us or stop using ChessExpert. Changes apply prospectively. We explain new purposes before processing and seek consent where required. Reading or continued use is not consent to new processing, analytics or payments.