Privacy policy
Last updated:
This policy explains what chess.do collects, why, and the choices you have. We collect only what the game needs. We don't show ads, we don't track you across other apps or websites, and we don't sell your data.
Who we are
chess.do is made by Hey Alpaca ("we"). You can reach us at support@chess.do.
What we collect
- Account: an account identifier. If you sign in with Google, Apple or email, we also receive your email address and, from Google, your name and profile photo. You can play as a guest without giving any of these.
- Profile: the display name and photo you choose. Photos you upload are stored on our servers.
- Gameplay: levels played, moves, scores, times, stars, coins, lives, hints, streaks, achievements and league results.
- Purchases: what you bought and when. Payment is handled by Apple or Google; we never see your card details.
- Technical: your app version, device model and operating system, and details of errors and crashes.
- Support: whatever you tell us when you write to us.
How we use it
- To run the game: save and sync your progress, keep your coins and purchases, and run leagues and rewards.
- To keep the game fair and safe: detect cheating, screen profile photos, and handle reports.
- To fix problems and answer support requests.
Where the law asks for a legal basis, we rely on providing the service you asked for, on our legitimate interest in keeping the game fair, secure and working, and on your consent where it is required.
What other players see
Players in your league see your display name, your photo (once approved) or chess avatar, and your weekly XP and rank. Nothing else about you is shown to other players.
Who we share it with
We use a few service providers who process data for us, only for these purposes:
- Google Firebase: sign-in, and checking that requests come from the real app.
- Google Cloud Vision: automatic screening of uploaded profile photos.
- RevenueCat: recording in-app purchases.
- Apple and Google: app stores and payments.
- Sentry: crash and error reports.
- Vultr: our servers, located in the United States.
We may also disclose information if the law requires it. We don't sell or rent personal data, and we don't share it for advertising.
How long we keep it
- Your account data, for as long as you have an account.
- Detailed move records of each attempt, for 90 days (longer only when an attempt is under review for cheating).
- After you delete your account: removed within 30 days, and from backups within a further 14 days.
Your choices and rights
You can change your name and photo, or go back to a chess avatar, at any time in the app. You can delete your account in the app or as described on Delete your account. Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to or restrict how we use it. To make a request, write to support@chess.do. You can also complain to your local data protection authority.
Children
chess.do is suitable for all ages and has no ads. Children can play as guests without giving any personal information. If you believe a child has given us personal information without the consent their country requires, contact us and we'll delete it.
International transfers
Our servers and some providers are in the United States and other countries. When data leaves your country, we rely on the protections the law provides, such as standard contractual clauses.
Changes
If we change this policy, we'll update the date above, and for important changes we'll tell you in the app.