Legal

Privacy Policy

We respect your privacy and are committed to protecting the personal information you share with us.

Last updated: June 11, 2024

Summary: ChessCoins collects only the information needed to provide the game service — your name, phone number, and gameplay data. We do not sell your data or share it with third parties for advertising purposes. You can delete your account and all associated data at any time.

1. Who We Are

ChessCoins ("we," "our," or "us") is a mobile chess application available on iOS and Android. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our application and website at chess.sayedkhattab.com.

Contact: For privacy-related questions, email us at support@chess.sayedkhattab.com.

2. Information We Collect

2.1 Information You Provide

  • Name: Your display name shown to other players and on the leaderboard.
  • Phone Number: Used as your unique account identifier and for login authentication.
  • Password: Stored as a secure one-way hash (bcrypt). We never store your plain-text password.
  • Profile Photo (optional): An avatar URL you choose to associate with your profile.

2.2 Information Generated by Your Use

  • Game History: Records of chess matches you play, including moves, results, and timestamps.
  • Rating: Your ELO chess rating, calculated from your game results.
  • ChessCoins Balance: Your in-app coin balance earned through gameplay.
  • Friends & Invitations: Records of friend connections and game invitations you send or receive.

2.3 Technical Information

  • Server Logs: Standard server logs that may include IP addresses and request timestamps, retained for up to 30 days for security purposes.
  • We do not use analytics SDKs, advertising networks, or tracking pixels in our app.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your player account.
  • Authenticate you when you log in.
  • Match you with other players and record game outcomes.
  • Calculate and display your ELO rating and ChessCoins balance.
  • Display your name on the public leaderboard (you can use a pseudonym).
  • Enable the friends and challenge invitation system.
  • Maintain the security and integrity of the service.
  • Respond to your support requests.

We do not use your information for advertising, sell it to third parties, or use it for any purpose beyond operating ChessCoins.

4. Information Sharing

We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

  • With Your Consent: When you explicitly approve a specific sharing action.
  • Legal Requirements: If required by applicable law, court order, or government authority.
  • Protection of Rights: To protect the rights, property, or safety of ChessCoins, our users, or the public.
  • Service Providers: We use a dedicated database server hosted in our infrastructure. This server processes data only under our direction and is not authorized to use your data for any other purpose.

4.1 Public Information

Your display name and ELO rating are visible to other players on the leaderboard and in search results within the app. Your phone number is never publicly visible to other users.

5. Data Storage and Security

Your data is stored on a secure, dedicated server. We implement appropriate technical and organizational measures to protect your personal information, including:

  • Passwords are hashed using bcrypt with a strong work factor.
  • All API communications are encrypted using HTTPS/TLS.
  • Authentication tokens (JWT) have a 30-day expiration and are signed with a secret key.
  • Our database is not publicly accessible and is protected by firewall rules.

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active. Specifically:

  • Active accounts: Data is retained for the duration of your account.
  • Deleted accounts: When you delete your account, your personal data (name, phone number, password hash, and avatar) is permanently erased immediately. Game history records are anonymized and may be retained for statistical purposes.
  • Server logs: Retained for up to 30 days, then automatically deleted.

7. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you by contacting support@chess.sayedkhattab.com.
  • Correction: Update your display name or avatar within the app at any time.
  • Deletion: Permanently delete your account and all associated personal data. You can do this through the app or by visiting our Account Deletion page.
  • Portability: Request an export of your data by contacting us at the email above.
  • Opt-out: Since we do not use your data for advertising, there is nothing to opt out of beyond account deletion.

8. Account Deletion

You can permanently delete your ChessCoins account at any time through two methods:

  • In-App: Navigate to Settings → Account → Delete Account within the ChessCoins app.
  • Web: Use our Account Deletion page at chess.sayedkhattab.com/delete-account.html.

Upon deletion, your name, phone number, and password hash are permanently and immediately erased from our systems. This action is irreversible.

9. Children's Privacy

ChessCoins is intended for users aged 13 and older. We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us at support@chess.sayedkhattab.com and we will promptly delete that information.

If you are between 13 and 18, please ensure you have your parent or guardian's permission before using ChessCoins.

10. Third-Party Services

ChessCoins does not integrate any third-party analytics, advertising, or social login services. Our app does not contain in-app purchases connected to Apple Pay or Google Pay.

Our website is hosted via standard web hosting. When you access our website, your browser may exchange information with our hosting provider's servers as part of normal web traffic.

11. International Users

ChessCoins is operated from and data is stored within our hosting infrastructure. By using the app, you consent to the transfer and processing of your information in accordance with this Privacy Policy. We apply the same level of data protection regardless of your location.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

  • Update the "Last updated" date at the top of this page.
  • Notify users via a notice within the app when the change is material.

Your continued use of ChessCoins after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy inquiries within 72 hours.