Privacy Policy
Last updated: September 3, 2026
Introduction
Chessalyz, Inc. ("Chessalyz," "we," "us," or "our") operates the chess training web application at chessalyz.ai. Chessalyz is an AI-powered chess analysis and practice platform: you can import games from Chess.com or Lichess (or upload a PGN), review critical moments with guided questions, build an opening repertoire, and practice with flashcards and puzzles.
This Privacy Policy explains how we collect, use, store, disclose, and safeguard personal information when you visit chessalyz.ai, create an account, sign in with Google, or use our services. You can read this policy and our public homepage without signing in.
Google User Data
Chessalyz offers optional Sign in with Google so you can create or access a Chessalyz account without a separate password. We request only the OpenID Connect scopes openid, email, andprofile. We do not request access to Gmail, Google Drive, Calendar, Contacts, or any other Google product data.
What Google user data we access
When you choose Sign in with Google, Google shares with us the information in your ID token:
- Your Google account email address, and Google's confirmation that the address is verified (we only accept verified addresses)
- Your Google account name
- Your Google account profile photo URL, if you have one
How we use Google user data
We use this Google user data only to authenticate you and operate your Chessalyz account:
- Create a Chessalyz account if you do not already have one, using your Google email as the account email
- Sign you in to the Chessalyz account that has the same email address on later visits
- Display your name and photo in the Chessalyz interface
- Send account email (sign-in links, password resets, and the other messages listed under Email Communications below) to that address
We do not use Google user data for advertising, remarketing, credit decisions, or selling data. We do not use Google user data to train models. We do not read, scan, or store the contents of any other Google service.
How we store Google user data
Your Google email, name, and photo URL are stored on Chessalyz servers as part of your user profile, with the same access controls we use for email-and-password accounts. We do not store a separate Google account identifier; your email address is what links your Google sign-in to your Chessalyz account. We store the Google ID token only long enough to verify it and create your Chessalyz session; we do not keep Google access tokens for later API calls, because we never call other Google APIs on your behalf.
How we share Google user data
We do not sell Google user data. We do not share Google user data with third parties for their own advertising or marketing. We share it only:
- With the infrastructure and email providers that host Chessalyz and deliver our account email, under contracts that limit use to providing our service
- When required by law, or to protect Chessalyz, our users, or the public
- With your direction, for example if you ask support to look up your account by email
Connecting Chess.com or Lichess is separate from Google Sign-In. Those platforms never receive your Google credentials, and Google never receives your chess-site passwords.
Managing or deleting Google Sign-In
You can revoke Chessalyz's access to your Google account at any time in your Google Account permissions (Google Account → Security → Third-party access). You can also delete your Chessalyz account by contacting [email protected], which removes the stored Google email, name, and photo URL from our systems, subject to legal retention requirements.
Information We Collect
Personal Information
- Account information (username, email address, and password if you sign up with email)
- Google account email, name, and profile photo if you use Sign in with Google (see Google User Data)
- Chess.com and Lichess usernames when you connect your accounts
- Profile information and preferences
- Payment and subscription metadata processed by our payment provider (we do not store full card numbers)
- Communication data when you contact us
Chess Game Data
- Game records (PGN files, moves, positions)
- Game metadata (dates, time controls, ratings)
- Analysis results and insights
- Performance statistics and trends
Technical Data
- IP address and device information
- Browser type and version
- Usage patterns and analytics
- Cookies and similar tracking technologies
How We Use Your Information
- Provide and maintain our chess analysis services
- Authenticate you, including through optional Sign in with Google
- Sync and analyze your chess games from connected platforms
- Generate personalized insights and recommendations
- Communicate with you about your account and our services
- Improve our platform and develop new features
- Ensure security and prevent fraud
- Comply with legal obligations
Email Communications
We send two kinds of email. Account and security messages are required to operate your account and cannot be turned off while you hold an account. Product updates are optional and you can unsubscribe from them at any time.
Required account and security messages
- Account notifications: Sign-in links, password resets, account security alerts, subscription confirmations
- Service notices: Maintenance notifications and important changes to the platform or this policy
- Activity reminders: Notifications about incomplete game analyses, reminders to complete actions you started
- Re-engagement communications: Gentle reminders if you haven't used the platform for an extended period
- Support communications: Responses to your inquiries and customer support requests
Optional product updates
- Product updates: Occasional news about new features and improvements
Every product update email includes an unsubscribe link. Unsubscribing stops product updates only; you will still receive the required account and security messages above. You can also email [email protected] to change your preferences.
Our Email Commitment
• We never sell or share your email address with third parties for their own marketing purposes
• Required messages are limited to your account, security, and the chess analysis services you use
• Product updates are always optional and honor your unsubscribe choice
By creating an account, you agree to receive the required account and security messages. They are necessary for us to provide our services and keep your account secure. Product updates are sent only until you unsubscribe.
Information Sharing
We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:
- With your explicit consent
- To service providers who assist us in operating our platform
- When required by law or to protect our rights
- In connection with a business transaction (merger, sale, etc.)
Model Training and Public Data Sources
To improve our chess analysis algorithms and provide better insights, we may use chess game data for model training purposes. All data used for such training comes exclusively from publicly available sources, including:
- Chess games in the public domain from historical databases
- Publicly shared game collections with appropriate licensing
- Open-source chess game databases
- Games explicitly made public by their creators
- Competition games that are part of public record
Copyright and Fair Use Compliance
Chess moves and game sequences are generally considered facts and are not subject to copyright protection. We ensure that all training data is sourced from public domain collections, open databases, or materials used under fair use principles. No copyrighted analytical content, commentary, or proprietary databases are used without proper authorization.
Your personal games and analysis remain private unless you explicitly choose to make them public. We never use private user data for model training without explicit consent, and any such usage would be clearly disclosed and opt-in only.
Third-Party Services
We use other companies to help operate Chessalyz. They process data only to provide their service to us:
- Google: optional account sign-in (email, name, profile photo) as described above
- Chess.com and Lichess: optional game import through their public APIs, using only the username you give us; we never ask for your Chess.com or Lichess password
- Stripe: payment processing for paid plans
- Mailchimp: delivery of account email and product updates to your account email address
- AI model providers: chess positions, your moves, and coaching text are sent to third-party AI models to generate analysis, explanations, and audio; we do not send them your Google account data
- PostHog: product analytics, only if you accept analytics cookies
- Ybug: optional in-app bug and feedback reports
- Hosting and email providers: to run the website and send account-related email
Those providers have their own privacy policies. Chessalyz is not affiliated with Chess.com, Lichess, or Google beyond using their documented sign-in or game APIs.
Data Retention
We keep account information, imported games, analysis, flashcards, and repertoire data for as long as your account is active. If you delete your account, we delete or anonymize personal information within a reasonable period unless we must keep a record for legal, security, or billing reasons (for example, a past invoice). First-party attribution records are kept for up to 90 days, as described in the Cookie Policy above.
Children's Privacy
Chessalyz is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact [email protected] and we will delete it.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.
Your Rights
You have the right to:
- Access and receive a copy of your personal information
- Rectify inaccurate or incomplete information
- Delete your personal information (subject to legal requirements)
- Restrict or object to certain processing activities
- Data portability for information you provided
- Withdraw consent where processing is based on consent
Cookies and Tracking
We use cookies and similar technologies to enhance your experience, analyze usage patterns, and provide personalized content. You can control cookie preferences through your browser settings.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
Subject: Privacy Policy Inquiry