← chessperiment

Privacy Policy (GDPR)

(Last updated: July 2024)

1. Controller

Responsible for data processing on this website: Lasse Thoroe - Chessperiment Address: Ahlerfeld 29, 38527 Meine, Germany Email: [email protected] Website: https://chessperiment.org

7. Retention Period

We store your data for as long as you have an account with us. Game histories and created content are retained longer to preserve platform integrity. You may request deletion of your account and associated personal data at any time.

2. General Information

The protection of your data is important to us. We only process personal data when it is necessary for providing our services and comply with the General Data Protection Regulation (GDPR).

3. Data We Collect

a) User accounts

When you create an account, we store your name, email address, and profile picture. This data is not public and serves platform functionality. Legal basis: Art. 6(1)(b) GDPR.

b) User-generated content

We store content you create such as chess boards and pieces. Depending on your settings, these may be publicly visible. Legal basis: Art. 6(1)(b) GDPR.

c) Chat function

Chat messages are stored and filtered for prohibited words to ensure safety. Legal basis: Art. 6(1)(f) GDPR.

4. Analytics Services

We use Vercel Analytics and Speed Insights to measure website performance. These services are privacy-friendly, use no cookies, and collect no personal data. Anonymous usage statistics such as visited pages and load times are recorded. Legal basis: Art. 6(1)(f) GDPR.

5. Database and Hosting

We use Google Firebase (Firestore) as our database. Your data (user accounts, game histories, created content) is stored there. Data may be processed in the USA. Google is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(b) GDPR.

6. Cookies

We use no cookies for tracking or advertising. Only a technically necessary session cookie (JWT) is set on login to maintain your session. This cookie is essential for the website's functionality. Legal basis: Art. 6(1)(b) GDPR.

8. Minors

Persons under 16 years of age should use our services only with parental consent.

9. Your Rights

You have the right to access, rectification, erasure, restriction, and data portability. Please contact us at the email address provided above.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

11. Changes

We may update this privacy policy. The current version applies at any time.