Privacy Policy
Last updated: 28 July 2026
This policy explains what ChessDecoded ("we", "us") collects, why, and who else sees it. It applies to chessdecoded.co.in and to the ChessDecoded Android app, which is a wrapper around the same website.
Who we are
ChessDecoded is an independently operated service based in India, and is the controller of the personal data described below. For any privacy question or request, contact us at chessdecoded@gmail.com.
What we collect
Account information. When you create an account we store your email address and a securely hashed password. We do not store your password in a form we can read. We do not ask for your real name, phone number, date of birth, or postal address.
Chess and training data. Games you play or import, the annotations and reasoning you write, puzzle attempts, spaced-repetition schedules, opening repertoires, and the statistics derived from them. This is the substance of the service — it is what your weak spots, training queue, and profile are built from.
Usage data. Our hosting provider records standard server logs, including IP address, browser user-agent, and the pages requested. These are used for security and debugging.
Payment data.We never see or store your card, bank, or UPI credentials. Payment happens entirely inside your own UPI app or on Wise's website. What we store is the transaction reference you submit so we can match your payment to your account, and the resulting record that your account has Plus access until a given date.
You can browse and play as a guest without an account. Guest activity is held on your own device and is not linked to any identity until you sign up.
Why we use it
To provide the service: run your account, save your games, score your annotations, generate analysis, and build your personal training queue. To keep the service working and secure. To process and verify payments for Plus. We do not sell your data, and we do not use it for advertising.
Who else receives it
We use the following processors. Each receives only what it needs to do its job.
| Processor | Purpose | Data shared |
|---|---|---|
| Supabase | Account authentication, database, and realtime multiplayer | Email address, password hash, and all game, annotation, and training data |
| Vercel | Website hosting and content delivery | Standard server logs, including IP address and browser user-agent |
| Groq | AI inference for position analysis, annotation scoring, and coaching | Chess positions, move lists, and any annotation text you submit for analysis |
| Lichess | Game import, endgame tablebase lookups, and the public puzzle set | The Lichess username you choose to import, and chess positions for tablebase queries |
| Chess.com | Game import from public game archives | The Chess.com username you enter — requested directly by your browser, not by our servers |
Two details worth being precise about. When you import from Chess.com, the request is made by your browser directly to Chess.com — their servers see your IP address, and ours are not involved. And the Stockfish chess engine runs entirely inside your own browser: positions you analyse with it never leave your device.
AI analysis
When you request an analysis or submit an annotation for scoring, the chess position, the moves, and any text you wrote are sent to our AI provider (Groq) to generate a response. Do not put personal or sensitive information into annotation text, because it will be transmitted as part of that request.
How long we keep it
Account and chess data are kept for as long as your account exists. If you ask us to delete your account, we remove your account record and the personal data attached to it. Server logs are retained on our hosting provider's standard schedule. Payment references are retained as long as required for financial record-keeping.
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and its contents. Email chessdecoded@gmail.com from the address on the account and we will action it within 30 days.
Cookies and local storage
We use cookies and browser storage strictly to keep you signed in and to remember your preferences and guest progress. We do not use advertising or cross-site tracking cookies.
Children
ChessDecoded is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Changes
If we change this policy materially we will update the date at the top of this page. Continuing to use the service after a change means you accept the updated policy.