Privacy Policy

Who we are

ChessCoda is operated by Maritacas OÜ, a company registered in Estonia ("we", "us"). We are the data controller for the personal data described in this policy. You can reach us at chesscoda-support@maritacas.io.

What we collect

• Account information. Your email address and, if you sign in with Google or Apple, the basic profile information they share (name and email; Apple lets you share a private relay address instead of your email). You may also set a display name. In the iOS app you can play as a guest first: that account has no email until you choose to create a full account.
• Profile and preferences. Optional information you provide to personalize coaching, such as your approximate playing strength, preferred time control, and improvement goal.
• Chess games and practice. Games you play in ChessCoda against our coach and practice partners, games you import, whether by connecting a Lichess or Chess.com username (we fetch publicly available games from those platforms) or by uploading or pasting game notation, the analysis and coaching we generate from them, your puzzle history, and any feedback you write about a coached review.
• Payment information. Payments on the website are processed by Stripe, and purchases in the iOS app by Apple. We do not receive or store your card details; we keep records of your subscription status.
• Usage and technical data. Information about how you use ChessCoda (such as which pages and app screens you visit and which features you use) and technical data like crash and error reports, collected to keep the service working and improve it. Analytics are tied to an internal account identifier, not your name or email.

How we use your data

• To provide the service: importing, analyzing, and coaching your games (performance of our contract with you).
• To operate subscriptions and billing (performance of contract; legal obligations).
• To understand product usage, fix errors, and improve the service (our legitimate interest in running and improving ChessCoda).
• To communicate with you about your account or the service.

We do not sell your personal data, and we do not use it for third-party advertising.

Who we share data with

We use a small number of service providers to run ChessCoda: Vercel (hosting), Supabase (database and authentication), Stripe (payment processing on the website), Apple (sign-in, if you choose it, and purchases in the iOS app), Google (sign-in, if you choose it), PostHog (product analytics), and Sentry (error monitoring). They process data on our behalf under data processing agreements, and we prefer providers and regions within the EU where available. We may also disclose data where the law requires it.

International transfers

Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep data

We keep your account data, games, and analyses while your account exists so the product can work across your history. You can delete your account yourself from Settings: it is disabled immediately, and your personal data (games, analyses, coaching, profile, and platform connections) is permanently erased after a 14-day grace window. If you signed in with Apple, deleting your account in the iOS app also removes ChessCoda from the apps using Sign in with Apple on your Apple Account. What we keep afterwards: de-identified usage statistics (event records that can no longer be linked to you) and billing records we are legally required to retain.

Cookies and similar technologies

On the website, we use cookies and browser storage only for what the service needs to work: keeping you signed in and remembering preferences (like dark mode). Our website analytics run without cookies and store nothing on your device, which is why you see no cookie banner. We do not use advertising cookies.

The iOS app keeps your sign-in and your preferences on your device. Its analytics keep a random identifier and a short queue of events there until they are sent. Nothing on your device is used for advertising or to track you across other apps.

Your rights

Under the GDPR you have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email chesscoda-support@maritacas.io. You also have the right to lodge a complaint with a supervisory authority. In Estonia, that is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

Security

We take reasonable technical and organizational measures to protect your data, such as encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

ChessCoda is not directed at children under 16. If you believe a child has provided us personal data without appropriate consent, contact us and we will address it.

Changes to this policy

We may update this policy as the product evolves. We will post the updated version here and adjust the date above; for significant changes we will take reasonable steps to notify you.