Privacy

Last updated: 7 October 2026

Short version: no sign-up, no real names or emails, no tracking, no ads yet, no advertising cookies.

What we use and why

On your device (browser storage): your language, sound setting, menu choices, a random key for each online game you join, a game in progress and, once you play online, your guest key and login ticket. Only so the game works; you can clear it in your browser settings.
Online games: setups, moves, clocks and results with a random game code — nothing personal. Unused game links are deleted after 30 days; finished games are kept anonymously for statistics and ratings.
Guest player (online play): the first time you play online, you get a random guest name (like “Cozy Bean”) and a rating, so you can be matched with players of similar strength. We store that name, your chosen chess piece, your rating, your rating history (which game, rating before and after) and when you last played. It is linked only to a random key kept on your device; our server stores just a fingerprint of that key, never the key itself. No real name or email. After 3 rated games, your guest name, chosen chess piece and rating appear on the public leaderboard. Guest players who haven't played for 12 months are deleted, with their ratings.
Sign in with Google (optional): only when you press “Sign in”, Google's sign-in window is loaded from Google (Google's own privacy policy applies to it). We keep Google's account number for you and, if Google confirms your email address, only a scrambled fingerprint of it (the same kind as for email sign-in) — so signing in with a code to that address opens the same account. We don't keep your email address or name. You then choose a player name and piece; both are public (your opponents and the leaderboard show them), so don't use your real name if you'd rather not. You can also add your full name — only if you want it shown on the public leaderboard; leave it empty to stay anonymous, and remove it any time. Signing in keeps your player name, piece, rating and game history on your account, so you can play on any device. You can sign out, or delete your account with everything in it, at any time (your name at the top of the main menu → “Delete my account”).
Sign in with email (optional): when you type your email address, our server sends you a 6-digit code through our email provider (Resend) and forgets the address straight away. We keep only a scrambled fingerprint of it (a one-way hash), so the same address finds your account again — we can't read your address back from it, and we never email you anything else. The code itself is kept only in our server's memory for 10 minutes.
Chat (online games): messages go only to your opponent. They are checked for rude words, links and contact details, and kept only in our server's memory while the game lasts — they are not saved. If someone presses “Report”, that game's last 30 messages are saved so we can check them, and deleted after 90 days.
Steam (optional): the Steam version signs you in with your Steam account automatically, and on the website you can press “Sign in with Steam”, which opens Steam's own sign-in page (Valve's privacy policy applies to it). We keep only your Steam account number (SteamID) and ask Steam whether that account has bought Chesspresso Premium there, because then your account has Premium everywhere. We don't receive or keep your Steam name, email, friends or anything else. If you bought Premium on the website, you can ask for a Steam key for the Steam version; we keep which key went to which account.
Buying Premium (optional): payment is handled by Stripe, which sells Premium to you as the reseller (merchant of record) and processes your payment and billing details under its own privacy policy. We never see your card details. From Stripe we receive and keep only the purchase record: which account bought Premium, when, the amount and currency, Stripe's payment reference, and that you ticked the box agreeing that Premium starts at once. We keep it with your account, so Premium works on every device; it is deleted when you delete your account. Stripe keeps its own sales records as the law requires.
Technical data: your IP address and browser type reach our hosting provider when you connect, to deliver and secure the website. Logs are kept briefly.
Anonymous counts: how many visits, games started and games finished per day and game mode — just totals, nothing that tells players apart. To count how many different devices visit per day, the server briefly combines your IP address and browser type with a secret that changes every day into a scrambled code. Only the daily number is stored; the code is kept in memory for that day only and then deleted. Nothing is stored on your device.
Layout: only if you allow it, the game checks on your device whether its own ad spaces are visible (e.g. hidden by an ad blocker), only to choose the layout. The result is never sent or stored. Without your permission nothing is checked. You can change this any time under “Privacy choices” at the bottom of the main menu.
Error reports: if the game crashes, a technical report (error, screen, browser type, language, game version — nothing identifying) goes to our server and is deleted after 90 days.

Legal basis: providing the game you asked for and keeping it secure (Art. 6(1)(b) and (f) GDPR). Fonts, pictures and sounds come from our own server — your browser doesn't contact other companies.

Service providers

Render (hosting) and Neon (database), both with servers in Frankfurt, Germany, under data processing agreements. If you choose to sign in with Google: Google (only for that sign-in). If you sign in with email: Resend (only to send the code). If you buy Premium: Stripe (payment, as reseller). If you sign in with Steam or play the Steam version: Valve (Steam, to confirm your account and that you own the game).

There are none yet. The grey boxes marked “AD” in the game are only empty placeholders that keep the layout ready — they show nothing and load nothing from advertisers. If we add ads, we'll update this page first and ask for your consent where required.

Your rights

You can ask for access to, correction or deletion of your data, or object to its use. You can delete your account or guest data yourself at any time (Sign in / your name at the top of the main menu → Delete). Or send us your game link or player name and we'll delete it for you. You can also complain to the Croatian data protection authority (AZOP) or the one in your country.

Contact

contact@chesspresso.space · Contact page · Terms

Legal notice

Dimitri Studios, obrt za usluge, vl. Paula Šego, Zagreb, Fojnička ulica 29
Fojnička ulica 29, 10000 Zagreb, Croatia · Obrtni registar, MBS 99300923

Credits

Horse whinnies (funny sounds): Lemasson A, Remeuf K, Trabalon M, Cuir F, Hausberger M, PLOS ONE 2015, licensed CC BY 4.0 (shortened, volume evened out).

← Back to the game