Privacy Policy

BitSquare Chess

This Privacy Policy explains what data BitSquare Chess ("the Platform") collects, why, and the choices you have — including under the EU/UK GDPR and the UK Data (Use and Access) Act 2026 (UK DUAA).

1. Information We Collect

• Account data: email, username, date of birth (used only to age-gate the chat profanity filter), country, and optional first/last name, collected at sign-up.
• Gameplay data: match history, per-format ratings, and moves played, used to power your profile, the Opening Explorer, and matchmaking.
• Communications: in-game chat and private messages you send to other players.
• Billing status: whether you hold an active Premium subscription, managed via Stripe (web) or your mobile app store (iOS/Android).

2. Session Cookies & Local Storage

We use a small set of essential browser storage that the Platform cannot function without:

• Essential: your authentication session token and the live WebSocket connection that powers real-time gameplay and chat.
• Functional: local preferences such as board orientation, board theme, and move-highlight settings, so they persist between visits.
• Statistical: anonymous usage analytics, used only to understand and improve the Platform. This category is never enabled unless you explicitly opt in via the cookie consent banner, and no such scripts run before that choice is recorded.

You can change your choice at any time from the cookie preferences banner.

3. Third-Party Processors

• Supabase: hosts our authentication and database (account data, match history, moderation records).
• Stripe: processes web-based Premium subscription payments. We never see or store your card details directly.

4. Moderation & Retention

Moderation actions (mutes, bans, and account purges) are recorded in an internal audit log accessible only to Platform Admins. If your account is purged, your profile is deleted, but match records are retained with your name replaced by a generic "Deleted Account" tag to preserve the integrity of other players' game history.

5. Your Rights

Subject to applicable law (including GDPR and the UK DUAA), you may request access to, correction of, or deletion of your personal data, and you may withdraw analytics consent at any time. To exercise these rights, contact us through your account support channel.