Privacy notice
Last changed: [TODO: date of publishing]
Who runs this site
Chess Survival (chess-survival.com) is run by [TODO: name and postal address of the operator]. Questions about your personal data: privacy@chess-survival.com. That address is for privacy matters only.
What the site stores, and why
Your training. For each finished round: its moves, how it ended, the scores Stockfish computed in your browser, the blunders and slides in it, and your rating before and after. For recap rounds: your recap items, their schedule, and how you answered (which move, how long you took). Rounds you leave before their end are not stored. This is the service itself: without your history the trainer can't go after your weak spots or recap your blunders.
Your visits. When each visit started and ended.
Your browser's key. Without an account, the site knows you only as a browser: a cookie holds a random key, and the site stores only a scrambled form (hash) of it, never the key itself.
Your account, if you create one: your username; your password as a salted hash (not the password itself, so nobody can read it back); and your email address if you give one. The email address is used for nothing but resetting your password: no newsletters, no notifications, never passed on. Pick a username that isn't your real name; the site doesn't need to know who you are.
Trap reports. When you fall into a line that looks like a trap, the line goes into the site's collection of trap lines with your user number. The line is chess, not about you; your number is removed when your data is deleted.
Server log. When your browser connects, the server logs its IP address with your user number, to find faults and abuse. The log forgets it after seven days. The web server keeps no access log.
The site does not store your real name, your age, your location or which browser you use. No analytics, no ads, no trackers, nothing loaded from other sites. Stockfish runs in your browser; your games are not sent anywhere else.
Legal basis: everything above except the server log is needed to provide the training you asked for (Art. 6(1)(b) GDPR). The server log is kept in the site's legitimate interest of running it safely (Art. 6(1)(f) GDPR).
Cookies
One cookie, os_user, holding the key above. It lasts 400 days and is renewed
on each visit. It is strictly necessary for the site to work, so it needs no consent
and there is no cookie banner. Nothing else is kept in your browser.
Who else sees your data
Nobody. Your data is not sold, shared or used for advertising. The site runs on Amazon Web Services in Ireland, which stores the data on the site's behalf under its data processing terms; that data stays in the EU. Email goes through Fastmail: the password reset emails the site sends, and what you write to privacy@chess-survival.com. Fastmail keeps this mail on its servers in Amsterdam, with a copy and backups in the US, under its data processing terms (the EU's standard contractual clauses). Data is disclosed to authorities only where the law requires it.
How long it is kept
- Your training and your account: as long as you use them. An account not used for two years is deleted. Without an account, the data of a browser not seen for 13 months is deleted (its cookie has expired by then, so nobody can reach that data anyway).
- Server log: seven days.
- Backups: at most 30 days, so deleted data is gone from them after a month.
Your rights
You have the right to see your data and get a copy of it, to have it corrected or deleted, to restrict or object to its use, and to take it elsewhere. Most of it you can do yourself in Settings: download everything the site stores about you as a file, change your username, email address or password, and delete your account (or, without an account, your browser's data). For anything else, write to the address above; you get an answer within a month. As the site doesn't know who you are, it may ask you to show that the data is yours.
You can also complain to a data protection authority: in Portugal the Comissão Nacional de Proteção de Dados (cnpd.pt), or the one where you live.
Age
The site is for people 13 and older.
Changes
Changes to this notice are published on this page, with the date above.