MyChessRating Privacy Policy

1. Scope

MyChessRating helps you track chess rating analytics, recent games, opening insights, and widget data for selected chess providers. This policy covers the iPhone app, the Android app, their widgets, and this website.

2. Data We Process

• Account data: a technical user id and the way you sign in. Guest accounts use a random device identifier created by the app. With Google Sign-In (iPhone and Android) we receive your Google account id, email address, and name when Google provides it. With Sign in with Apple (iPhone only) we receive your Apple user id and, if you share it, your email address. If you use email sign-in, we store your email and a salted password hash.
• Chess data: public provider username, games metadata, openings, rating changes, and derived insights.
• App activity: Daily Three answers and streaks, rating goals, and the days the app or widget was opened.
• Subscription data on iPhone: Apple product id, renewal dates, entitlement status, and related purchase status.
• Purchases on Android: Pro is bought through Google Play Billing. Google processes the payment; we do not receive your card or payment details, and the app only checks the purchase status on your device to unlock Pro.
• Notification data: a push token (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android), the device time zone, app language, and your notification preferences. We store them to deliver the weekly report, reminders, and other notifications you enable.
• App settings and widget data: theme, language, game filters, widget preferences, and the latest rating snapshot the Home Screen widget shows. Widget data is stored on your device and refreshed from our backend with your app session.
• Feedback: messages you send from the app, an optional reply email, and the app version, operating system version, and device model attached to the message.
• Technical data: IP address, user agent, and request metadata needed for reliability, security, abuse prevention, and debugging.
• Website visit statistics without cookies: see Website analytics below.
• Google Analytics data on the website, after your consent: page path, referring source, approximate region, device and browser details, App Store link clicks, guide navigation, and an analytics cookie identifier.

Website analytics. We count visits with datafirst, our own analytics service. It runs from this site's own address, sets no cookies and stores nothing in your browser. For each page view your browser sends the page path (without query strings, apart from campaign tags such as utm_source), the referring website's domain, the page title, how long the page was in view and how far you scrolled, the domain of any other website you follow a link to, and, as with any request, your IP address and browser user agent. On our server the IP address is used only to look up your country and, together with a random value that changes every day and is then deleted, to make a daily visitor code; the IP address itself is not stored. We keep the page path, referring domain, country, device type, browser and operating system, the time the page was in view, how far you scrolled, the domains of websites you followed links to, the daily code and the time, for up to 25 months. Because the daily value is deleted, the code can't be linked back to you or across days. Data is processed on our hosting provider Railway's servers. We use it only to understand how the site is used (legitimate interest, Art. 6(1)(f) GDPR); it is not used for advertising or profiling and not shared.

The apps do not show ads and do not use the advertising identifier. We do not collect precise location, contacts, photos, or files.

3. How We Use Data

We use data to provide app features, sync rating state, display widgets, send the notifications you enable, verify Pro access, maintain account security, answer feedback, troubleshoot service issues, and improve reliability. We count website visits without cookies as described under Website analytics. With your consent, we also use Google Analytics to understand visits to our public pages and which guides lead people to the App Store.

4. Data Sources and Processors

Chess data is read from third-party chess services such as Chess.com and Lichess. Account-linked app data is processed with our Railway backend infrastructure.

• Apple: payments, subscriptions, refunds, and purchase status on iPhone; Sign in with Apple; push delivery through Apple Push Notification service.
• Google: payments, subscriptions, refunds, and purchase status on Android through Google Play; Google Sign-In; push delivery on Android through Firebase Cloud Messaging, which receives the push token and the notification content only to deliver it.
• Telegram: feedback messages are forwarded to the team's private Telegram chat so we can read and answer them.
• OpenRouter: when you use the in-app coach, chess facts from your games (positions, moves, engine evaluations, and opening names) and the app language are sent to a language model through OpenRouter to word coach explanations. We do not send your name, email, or account identifiers.
• Google Analytics: limited website analytics data, only after you accept analytics cookies on the public website.

The website's fonts and scripts are served from our own domain, so opening a page does not send requests to Google Fonts or other content delivery networks. Our cookieless visit statistics (datafirst) are also served from this domain. Google Analytics loads only after you accept analytics cookies.

These providers act as service providers for us and process data under their own terms and privacy policies.

5. Sharing and Tracking

We do not sell your personal data. We do not use third-party advertising tracking. Website analytics is not used for third-party advertising, and Google advertising personalization and Google Signals are disabled. Data is shared only with service providers needed to operate the app, process purchases, deliver notifications, provide chess data, or comply with legal requirements.

6. Retention

Data is retained while your account is active or as needed to provide app features, maintain security, resolve disputes, comply with legal obligations, and support purchase records. When you delete your account, your account data is removed from our active database right away. Feedback messages are kept without a link to your account. Apple and Google keep their own purchase records. Details are on the account deletion page.

7. Your Controls

You can sign out or delete your account from Settings > Account > Delete Account in the iPhone and Android apps. Account deletion removes cloud-linked account data and local app data associated with the app. You can also request deletion without the app: see /delete-account.

On iPhone, manage subscriptions, cancellations, and refunds from your Apple ID account settings. On Android, manage and cancel subscriptions in Google Play under Payments & subscriptions (play.google.com/store/account/subscriptions); refunds are handled by Google Play.

You can turn notifications off in the app settings or in your device's system settings. On the public website, you can accept or reject analytics cookies and withdraw consent at any time through the Cookie settings control. Analytics cookies are set only after you accept them. The cookieless visit statistics described under Website analytics set no cookies and do not depend on this choice.

8. Children

The app is not directed to children under the age required by your jurisdiction and platform rules.

9. Contact

For privacy questions or support, contact av.vinokurov@gmail.com.