Privacy Policy

Last updated: June 27, 2026

This Privacy Policy describes how ChessForgePro collects, uses, stores, shares, and deletes Personal Data when You access or use the Service.

By accessing or using the Service, creating an Account, importing chess data, joining a waitlist, or otherwise submitting information to ChessForgePro, You acknowledge that We process Your Personal Data as described in this Privacy Policy.

Data Controller

ChessForgePro is the data controller of Your Personal Data for the purposes described in this Privacy Policy.

ChessForgePro is an early-stage independent software project operated from Ukraine.

You can contact Us about privacy matters at: chessforgepro@gmail.com.

Age Restriction: 18+ Only

The Service is intended only for individuals who are at least 18 years old.

We do not knowingly collect Personal Data from individuals under 18 years of age.

If You are under 18 years of age, You must not access or use the Service, create an Account, join a waitlist, upload chess data, connect third-party chess accounts, or submit Personal Data to Us.

If We discover or reasonably believe that a user is under 18 years of age, We may suspend or terminate the Account and delete the Account and associated Personal Data from Our active systems.

If You believe that a person under 18 has provided Personal Data to ChessForgePro, please contact Us at chessforgepro@gmail.com.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions have the same meaning regardless of whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access the Service or parts of the Service.

• Company referred to as "We", "Us", or "Our" means ChessForgePro.

• Cookies are small files placed on Your Device by a website to store information such as session identifiers, preferences, or other data needed for website functionality.

• Device means any device that can access the Service, such as a computer, mobile phone, tablet, or similar device.

• Personal Data or Personal Information means any information that relates to an identified or identifiable individual.

• Service means the ChessForgePro website and related chess training, analysis, repertoire, puzzle, account, and waitlist features accessible at https://chessforge.pro.

• Service Provider means any natural or legal person who processes data on behalf of ChessForgePro or helps Us operate, secure, host, maintain, or improve the Service.

• Usage Data means data collected automatically when using the Service, such as IP address, browser type, browser version, API requests, timestamps, request status codes, error logs, diagnostic logs, and similar technical data.

• User Content means chess data, PGN files, games, moves, FEN positions, repertoires, analysis results, generated puzzles, training progress, preferences, or other content that You import, upload, create, save, or process through the Service.

• Waitlist means a form, popup, modal, or similar feature that allows You to register interest in planned Pro, Premium, or other future features.

• You means the individual accessing or using the Service.

Types of Data We Collect

Account Data

When You create or use an Account, We may collect and process:

• Email address
• Login or username
• Password hash
• Account role, account status, and profile type
• Registration date
• Last login time
• Email verification status, if email verification is enabled
• Account settings and preferences

We never store Your original plain-text password. Passwords are stored only in hashed form.

Authentication and Security Data

To operate and protect the Service, We may collect and process:

• Successful and failed login attempts
• Identifier used during login
• Timestamp of authentication events
• User ID linked to authentication events
• Session-related data
• Security and abuse-prevention logs
• IP address and technical request information

Imported Chess Data

If You import or upload chess data, We may collect and process:

• PGN files
• Game moves
• Game results
• FEN positions
• Opening data
• Game source and metadata
• Imported games from Lichess, Chess.com, or other sources

Connected Chess Accounts

If You connect or reference third-party chess accounts, We may collect and process:

• Platform name, such as Lichess or Chess.com
• Chess username
• Imported public or authorized game data
• Last sync time
• Sync status and error logs

Analysis and Training Data

When You use chess training or analysis features, We may collect and process:

• Stockfish or engine analysis jobs
• Analysis results and evaluations
• Generated puzzles
• Training progress
• Opening repertoire data
• Saved positions and moves
• Feature usage related to chess training and analysis

Waitlist Data

If You join a Waitlist for planned Pro, Premium, or other future features, We may collect and process:

• Email address
• Selected plan or feature interest, such as Pro, Premium, or Not sure yet
• Confirmation that You are at least 18 years old
• Country or region, if provided
• Feedback, comments, or feature requests, if provided
• Submission date
• Source of submission, such as pricing page or waitlist popup
• Related technical and security logs

Voluntary Support Data

If You voluntarily support ChessForgePro through third-party platforms such as Patreon, Buy Me a Coffee, or similar services, those platforms may provide Us with limited information, such as:

• Supporter name or public profile name
• Platform profile identifier
• Support tier or membership status
• Support status or payment status
• Messages or comments You submit through the support platform
• Other metadata made available by the platform

We do not receive or store Your payment card details from voluntary support platforms.

Technical and Usage Data

When You access or use the Service, We may automatically collect:

• IP address
• Browser type and version
• Device type
• Operating system
• API requests
• Time and date of requests
• Request status codes
• Error logs
• Diagnostic data
• Security logs
• Performance and service reliability data

Data We Do Not Store

At this stage, We do not store:

• Plain-text passwords
• Payment card details
• Bank account details
• Ordinary user authentication tokens in browser localStorage
• Full browser fingerprinting data
• Advertising or remarketing data
• Google reCAPTCHA data, unless We introduce such technology in the future
• Analytics cookies, unless We introduce analytics in the future
• Email confirmation tokens, unless email verification is implemented in the future

Paid features are not currently processed through the Service. If payments are introduced in the future, this Privacy Policy may be updated to describe the relevant payment provider and payment-related data processing.

If We introduce payments, analytics, advertising cookies, reCAPTCHA, email marketing, or other new processing activities in the future, We may update this Privacy Policy and provide additional notices or choices where required by law.

Cookies, Local Storage, and Similar Technologies

We use Cookies, localStorage, and similar browser storage only as described in this Privacy Policy. We do not currently use advertising, remarketing, or cross-site tracking cookies.

For ordinary user authentication, We use an HTTP-only authentication cookie instead of storing the main authentication token in browser localStorage. Because the authentication cookie is HTTP-only, it cannot be read by client-side JavaScript.

Strictly Necessary Cookies and Storage

• Authentication Cookie — used to maintain Your authenticated session. The backend issues an authentication token and stores it in an HTTP-only cookie named cf_auth. This cookie is sent with authenticated requests and cannot be read by client-side JavaScript.
• Essential Session Cookies — used where necessary to support login sessions, account security, and core functionality of the Service.
• Security Storage — used where necessary to protect the Service, prevent abuse, maintain authentication state, and secure user sessions.

Where supported, authentication cookies are configured with security protections such as HttpOnly, Secure, and SameSite attributes.

Preference and Functionality Storage

• Cookie Notice Acceptance — used to remember Your cookie notice choice.
• Language Preferences — used to remember selected language preferences, if available.
• Board and Interface Preferences — used to remember chessboard settings, piece styles, themes, layout preferences, and similar functionality choices.

Analytics and Advertising

We do not currently use analytics, advertising, remarketing, or cross-context behavioral advertising cookies.

If We introduce analytics or non-essential cookies in the future, We will update this Privacy Policy and request consent where required by applicable law.

How We Use Your Personal Data

We use Personal Data for the following purposes:

• To provide, operate, and maintain the Service
• To create and manage Your Account
• To authenticate users and maintain login sessions
• To import, store, process, and display chess data
• To sync data with connected Lichess, Chess.com, or other chess accounts, where enabled
• To provide chess analysis, training tools, puzzles, repertoires, and related features
• To manage planned Pro, Premium, or other feature waitlists
• To contact You about waitlist updates, plan availability, launch updates, product updates, account matters, security matters, and important Service changes
• To provide customer support
• To debug errors and improve reliability
• To protect the Service from fraud, abuse, scraping, attacks, unauthorized access, and misuse
• To improve the Service, including by using aggregated or anonymized data
• To comply with legal obligations
• To enforce Our Terms and protect Our rights

Legal Basis for Processing Personal Data

If You are located in the European Economic Area, United Kingdom, Switzerland, or another region that requires a legal basis for processing Personal Data, We rely on the following legal bases:

• Performance of a contract — to provide the Service, manage Your Account, authenticate You, import chess data, provide analysis and training features, and respond to Your requests.
• Legitimate interests — to secure the Service, prevent abuse, debug errors, maintain service reliability, improve the Service, understand interest in planned features, and protect Our rights, provided that such interests are not overridden by Your rights and freedoms.
• Consent — for optional communications, non-essential cookies, waitlist communications, age confirmation in the waitlist popup, or other processing where consent is required by law.
• Legal obligation — when We must process or retain information to comply with applicable law, legal process, or governmental requests.

Waitlist and Future Paid Features

If You join a Waitlist for planned Pro, Premium, or other future features, We may use Your email address and any information You provide to manage the Waitlist, understand interest in future features, and contact You about availability, launch updates, or related product changes.

Joining a Waitlist does not create a paid subscription and does not require You to purchase any future feature.

By joining a Waitlist, You consent to receive Waitlist-related updates about the selected plan or feature. You may withdraw this consent at any time.

If We send Waitlist or launch update emails, You may opt out at any time by using an unsubscribe link where available or by contacting Us at chessforgepro@gmail.com.

You may request removal from the Waitlist by contacting Us at chessforgepro@gmail.com.

Voluntary Support Platforms

If You voluntarily support ChessForgePro through third-party platforms such as Patreon, Buy Me a Coffee, or similar services, those platforms process Your payment, account, and support information according to their own terms and privacy policies.

We may receive limited information from such platforms, such as Your supporter name, profile identifier, support tier, support status, and related metadata, where needed to manage supporter-related communications, acknowledgments, or community features.

Voluntary support is separate from Your ChessForgePro Account unless expressly stated otherwise.

We do not receive or store Your payment card details from voluntary support platforms.

Disclosure of Your Personal Data

We may share Personal Data in the following situations:

• With Service Providers: We may share Personal Data with providers who help Us host, store, secure, maintain, debug, email, or operate the Service.
• With third-party chess platforms: If You connect or import data from a third-party chess platform, data may be exchanged as necessary to provide the requested connection or import feature.
• With voluntary support platforms: If You support ChessForgePro through a third-party platform, We may receive limited supporter-related information from that platform.
• For legal reasons: We may disclose Personal Data if required by law, regulation, legal process, governmental request, or to protect rights, safety, security, or integrity.
• For security and abuse prevention: We may disclose information where necessary to investigate fraud, abuse, unauthorized access, attacks, or violations of Our Terms.
• Business transfers: We may disclose or transfer Personal Data in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.
• With Your consent: We may disclose Personal Data for other purposes with Your consent.

We do not sell Your Personal Data.

We do not share Your Personal Data for cross-context behavioral advertising.

Service Providers

The specific Service Providers We use may change over time.

Service Providers may include hosting providers, database providers, infrastructure providers, email delivery providers, security providers, logging providers, backup providers, and other technical providers needed to operate and protect the Service.

Service Providers are permitted to process Personal Data only as necessary to provide services to Us or as otherwise required by law.

Third-Party Chess Platforms

The Service may allow You to connect to or import data from third-party chess platforms such as Lichess, Chess.com, or similar services.

Your use of third-party chess platforms is governed by their own terms and privacy policies.

We are not responsible for the privacy practices, security, availability, or content of third-party chess platforms.

International Data Transfers

Your Personal Data may be processed in Ukraine and in other countries where We or Our Service Providers operate.

These countries may have data protection laws that are different from those in Your country or region.

Where required by applicable data protection law, We use appropriate safeguards for international transfers, which may include data processing agreements, Standard Contractual Clauses, or other legally recognized transfer mechanisms.

Retention of Your Personal Data

We retain Personal Data only for as long as reasonably necessary to provide, maintain, secure, and improve the Service, comply with legal obligations, resolve disputes, and enforce Our Terms.

• Account Data: retained while Your Account is active, unless deleted earlier where possible.
• Imported Chess Data: retained while Your Account is active, unless deleted earlier by You or through available Service features.
• Analysis and Training Data: retained while Your Account is active, unless deleted earlier by You or through available Service features.
• Connected Chess Accounts Data: retained while the account remains connected or until You delete Your ChessForgePro Account.
• Preferences and Functionality Data: retained while Your Account is active or until cleared by You, where available.
• Waitlist Data: retained until You request removal, unsubscribe, withdraw consent, or the Waitlist is no longer needed.
• Voluntary Support Data: retained as long as reasonably necessary to manage supporter-related communications, acknowledgments, records, or platform-related matters.
• Authentication, Security, Server, and Diagnostic Logs: retained for a limited period necessary for security, abuse prevention, debugging, service reliability, legal compliance, or dispute resolution.

When You delete Your Account, We delete Your Account and associated Personal Data from Our active systems as described below.

Residual copies may remain in backups, security archives, or system logs for a limited period and will be deleted or overwritten according to Our backup retention cycle, unless retention is required for legal, security, fraud prevention, dispute resolution, or compliance purposes.

Deleting Your Account and Personal Data

You can delete Your Account at any time from the Settings page, where this feature is available.

When You delete Your Account, We delete Your Account and associated Personal Data from Our active systems, including:

• Account information
• Imported chess games and PGN files
• Connected chess accounts
• Analysis data and results
• Training progress and puzzles
• Saved preferences
• Saved repertoires

After deletion, You will no longer be able to access Your Account, imported games, analysis results, training progress, saved repertoires, or other data associated with that Account.

Account deletion cannot be undone.

Some limited information may be retained where necessary for legal compliance, security, fraud prevention, dispute resolution, backup integrity, or enforcement of Our Terms.

If You need help with deletion or other privacy requests, contact Us at chessforgepro@gmail.com. We will respond within a reasonable period and, where required by law, within 30 days.

Your Privacy Rights

Depending on Your location and applicable law, You may have rights to:

• Access the Personal Data We hold about You
• Request correction of inaccurate Personal Data
• Request deletion of Your Personal Data
• Object to certain processing
• Restrict certain processing
• Request data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with Your local data protection authority

To exercise Your privacy rights, contact Us at chessforgepro@gmail.com.

We may need to verify Your identity before responding to certain privacy requests.

California Privacy Disclosures

To the extent applicable, California residents may have rights to know, access, correct, delete, and obtain information about certain Personal Data collected about them.

We collect only the categories of Personal Data described in this Privacy Policy for the purposes described in this Privacy Policy.

We do not sell Personal Data.

We do not share Personal Data for cross-context behavioral advertising.

We have not sold Personal Data in the past 12 months.

We have not shared Personal Data for cross-context behavioral advertising in the past 12 months.

We do not knowingly sell or share Personal Data of individuals under 18 years of age.

Do Not Track

Some browsers may transmit "Do Not Track" signals. Because there is no uniform industry standard for responding to such signals, We do not currently respond to "Do Not Track" signals.

However, We do not currently use advertising, remarketing, or cross-context behavioral advertising cookies.

Security of Your Personal Data

We use reasonable technical and organizational measures designed to protect Personal Data, including encryption in transit, HTTP-only authentication cookies, password hashing, access controls, and periodic review of security practices.

However, no method of transmission over the Internet, method of electronic storage, or online service is completely secure. We cannot guarantee absolute security.

You are responsible for using a strong password, keeping Your login credentials confidential, logging out on shared devices, and notifying Us promptly if You believe Your Account or session has been compromised.

Automated Decision-Making

We do not currently use Personal Data for automated decision-making that produces legal or similarly significant effects.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If changes are material, We will provide reasonable notice where possible, such as by updating the "Last updated" date, posting a notice on the Service, or contacting You by email.

Continued use of the Service after the updated Privacy Policy becomes effective means that You acknowledge the updated Privacy Policy.

Contact Us

If You have any questions, requests, or concerns about this Privacy Policy or Your Personal Data, contact Us at:

• chessforgepro@gmail.com