Last updated: 26 June 2026
1. Who controls your data
The data controller is ChessInspect, France. For any privacy question or request, contact [email protected].
2. What we collect
- Account data: your email address and a securely hashed password (we never store your password in plain text).
- Optional profile data: your chess.com username, if you provide it.
- Usage data: the reports you generate, credit balance and purchase records, and basic rate-limiting metadata such as your IP address.
- Payment data: handled by Stripe. We do not store your full card details; we keep only references needed to reconcile your purchase.
3. How we use it
We use your data to provide the Service (analyze your games and generate reports), to manage your account and credits, to send transactional emails (verification and password reset), to prevent abuse, and to comply with legal obligations.
4. Who we share it with
We share data with processors strictly to run the Service:
- Anthropic — receives an anonymized summary of your game statistics to generate the written report.
- Stripe — processes payments.
- Resend — delivers transactional email.
- chess.com — public game data is fetched using the username you provide.
We do not sell your personal data.
5. Legal bases (GDPR)
Where the GDPR applies, we process data to perform our contract with you (account, reports, payments), for our legitimate interests (security and abuse prevention), and to meet legal obligations (e.g. tax records).
6. Retention
We keep account and report data for as long as your account is active. Payment records may be retained longer where required by law. You can request deletion at any time (see our GDPR notice).
7. Security
Passwords are hashed with argon2. Session cookies are signed and, in production, served over HTTPS with secure flags. No system is perfectly secure, but we take reasonable measures to protect your data.
8. Your rights
Depending on your location you may have rights to access, correct, delete, or export your data, and to object to certain processing. See the GDPR notice or email [email protected].