Privacy Policy

Who we are

ChessCoda is operated by Maritacas OÜ, a company registered in Estonia ("we", "us"). We are the data controller for the personal data described in this policy. You can reach us at chesscoda-support@maritacas.io.

What we collect

• Account information. Your email address and, if you sign in with Google, the basic profile information Google shares (name and email). You may also set a display name.
• Profile and preferences. Optional information you provide to personalize coaching, such as your approximate playing strength, preferred time control, and improvement goal.
• Chess games. Games you import — by connecting a Lichess or Chess.com username (we fetch publicly available games from those platforms) or by uploading or pasting game notation — and the analysis and coaching we generate from them.
• Payment information. Payments are processed by Stripe. We do not receive or store your card details; we keep records of your subscription status.
• Usage and technical data. Information about how you use ChessCoda (such as which ChessCoda pages you visit and which features you use) and technical data like error reports, collected to keep the service working and improve it. Analytics are tied to an internal account identifier, not your name or email.

How we use your data

• To provide the service: importing, analyzing, and coaching your games (performance of our contract with you).
• To operate subscriptions and billing (performance of contract; legal obligations).
• To understand product usage, fix errors, and improve the service (our legitimate interest in running and improving ChessCoda).
• To communicate with you about your account or the service.

We do not sell your personal data, and we do not use it for third-party advertising.

Who we share data with

We use a small number of service providers to run ChessCoda: Vercel (hosting), Supabase (database and authentication), Stripe (payment processing), Google (sign-in, if you choose it), PostHog (product analytics), and Sentry (error monitoring). They process data on our behalf under data processing agreements, and we prefer providers and regions within the EU where available. We may also disclose data where the law requires it.

International transfers

Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep data

We keep your account data, games, and analyses while your account exists so the product can work across your history. You can delete your account yourself from Settings: it is disabled immediately and your personal data — games, analyses, coaching, profile, and platform connections — is permanently erased after a 14-day grace window. What we keep afterwards: de-identified usage statistics (event records that can no longer be linked to you) and billing records we are legally required to retain.

Cookies and similar technologies

We use cookies and browser storage only for what the service needs to work: keeping you signed in and remembering preferences (like dark mode). Our analytics run without cookies — they store nothing on your device, which is why you see no cookie banner. We do not use advertising cookies.

Your rights

Under the GDPR you have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email chesscoda-support@maritacas.io. You also have the right to lodge a complaint with a supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon).

Security

We take reasonable technical and organizational measures to protect your data, such as encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

ChessCoda is not directed at children under 16. If you believe a child has provided us personal data without appropriate consent, contact us and we will address it.

Changes to this policy

We may update this policy as the product evolves. We will post the updated version here and adjust the date above; for significant changes we will take reasonable steps to notify you.