Privacy and personal data
Service operator and data controller: Angelo Maria Volpe. Contact: assistenza@aichess.it.
Data used by the service
AiChess stores a session identifier, username, optional profile photo, supplied email address, cryptographic password and recovery-code verifiers, games, clocks, results, Elo, reviews, exercises, repertoires and recall attempts. A report includes its category, note and game reference. We do not request payment data, location, contacts, microphone or camera access.
Purposes
These data provide the games, account access, syncing, study and leaderboards requested by users (performance of the service). Rate limits, technical records and human report reviews protect against abuse (legitimate interest in security). We do not use these data for advertising, selling profiles or decisions with legal effects based on chess accuracy.
Who can see data
Usernames, scores and leaderboard results are visible to other players; an opponent sees shared game data. Profile photos, email addresses, access secrets, personal notebooks and reports are not public. Photos are resized on the device and stored without metadata; replace or remove yours in Settings. The operator may read reports for human review. OVHcloud provides hosting and email. Stockfish runs on the AiChess server: positions are not sent to a generative AI service.
Optional external sign-in
When Google or Facebook sign-in is enabled and you choose it, that provider verifies your identity under its own privacy policy. AiChess uses its identifier to link your account and never receives your Google or Facebook password. A “Coming soon” button does not initiate sign-in. App features may differ from the website.
Cookies and device storage
We use technical HttpOnly session cookies with a 30-day expiry and a temporary cookie during external sign-in. Language, theme, study goals and progress copies may be stored on your device. Website resources may be cached for offline loading; private API responses are not cached by the service worker. The app stores its session credential in the device Keychain. There are no advertising cookies or third-party analytics.
Retention
Accounts, games and progress are kept while the account is maintained or until deletion is requested. Guest-session expiry removes access but does not delete server records: contact us about guest data before clearing the cookie. Backups rotate after 14 days. Account deletion removes the account and progress; the player identifier in shared games is replaced to preserve the opponent’s game.
Your rights
Export your data or delete your account from Profile. For access, correction, deletion, restriction, objection and portability where applicable, contact assistenza@aichess.it. You may complain to the Italian data protection authority or another competent authority. We may need to verify identity to protect an account. Never send passwords or recovery codes.
Children and updates
AiChess does not request a date of birth or use advertising profiling. A parent or guardian may contact us regarding a child’s data. Social and learning features do not replace appropriate supervision. New processing activities will be described here before activation.
Updated: 28 September 2026
Open AiChess