Privacy Policy
This Privacy Policy describes how Chess-Rankings collects, uses, and protects your personal data when you use our website (chess-rankings.com) and our mobile application.
1. Data Controller
Who we are
The data controller is Chess-Rankings, operated by a self-employed individual based in Spain, European Union. There is no incorporated company at present. For any request regarding your personal data, contact us at: chessrankings@gmail.com.
2. Data We Collect
Account data (if you register)
If you create an account (email/password, Google Sign-In, or Sign in with Apple), we store: email address, user ID, roles, authentication tokens (access and refresh), and optionally display name and photo URL. This data is used to provide the service and is stored on our backend (games.chess-rankings.com) and locally on your device (e.g. via secure storage) for session management.
Usage and technical data
We collect usage and technical data necessary to run and improve the service: device/browser information, IP address, app or web interactions (e.g. screen views, navigation, feature usage). On web, we may use local storage or similar technologies for preferences and session state. We do not store full card or payment details; any future payment processing will be handled by third-party payment processors.
Analytics and crash reporting
We use Firebase (Google) for analytics (e.g. screen views, events) and Firebase Crashlytics for crash and error reporting. These services may collect device identifiers, app version, and usage events. Analytics help us understand how the product is used; crash data helps us fix errors. On web, Firebase Analytics may use cookies or similar technologies.
3. Purposes and Legal Bases
Contract
Processing necessary to perform our contract with you: account creation, authentication, providing the Chess-Rankings service (rankings, analysis, database, puzzles, tournaments).
Legitimate interests
Processing for our legitimate interests: security (e.g. logs, abuse prevention), improving the service (analytics, crash reports), and defending legal claims. We do not use your data for marketing without your consent.
Consent
Where we use non-essential cookies or similar technologies (e.g. for analytics beyond strictly necessary operation), we rely on your consent where required by law. You can withdraw consent at any time (see “Your rights” and our Cookie Policy).
4. Data Retention
General
We retain your data only as long as necessary for the purposes above. Account data is kept while your account is active and for a reasonable period after deletion for backup and legal obligations. Usage and analytics data are typically retained in aggregated or anonymized form; raw logs may be kept for a limited period for security and troubleshooting. Some log data may be retained longer where required for security, fraud prevention, or legal compliance.
5. Processors and Third Parties
Who we share data with
We use the following processors/services that may process personal data: (1) Firebase (Google) – analytics, crash reporting, push notifications, in-app messaging; (2) Backend infrastructure (games.chess-rankings.com) for account and API; (3) Lichess (where we integrate with their API for tournaments/live data). We do not sell your personal data. If we introduce donations or paid courses, payment will be processed by third-party payment providers; we will not store full card details.
6. International Transfers
Transfers outside the EEA
Some of our processors (e.g. Google/Firebase) may be located outside the European Economic Area. Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or an adequacy decision.
7. Your Rights (GDPR)
Rights you have
You have the right to: access your personal data; request rectification of inaccurate data; request erasure (“right to be forgotten”) in certain cases; request restriction of processing; data portability (where applicable); object to processing based on legitimate interests; withdraw consent at any time where processing is based on consent; lodge a complaint with a supervisory authority. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD): https://www.aepd.es.
How to exercise your rights
To exercise any of these rights, contact us at chessrankings@gmail.com. We will respond within the time limits set by applicable law (generally one month under GDPR).
8. Children
Age
The service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us at chessrankings@gmail.com and we will delete it.
9. Donations and Paid Courses
Future features
We may offer voluntary donations and paid digital content (e.g. courses). Donations are optional and do not grant premium entitlements unless explicitly stated. Payment will be processed by third-party payment processors; we will not store full card or payment details. Specific terms for donations and purchases will be set out on the relevant pages and in our Terms of Service.
10. Changes
Updates to this policy
We may update this Privacy Policy from time to time. We will post the updated version on the app and website and indicate the date of the last update. Continued use of the service after changes constitutes acceptance of the updated policy where permitted by law.
Contact: chessrankings@gmail.com