Privacy policy
Last updated 11 October 2026.
Chesslit is a chess training site run by an individual based in the European Union. This page explains what the site stores about you and what you can do about it. Questions and requests go to support@chesslit.com.
What we store
If you only browse the public pages, we store nothing about you beyond the server logs described below.
When you create an account we store:
- Your email address, used to confirm the account and to let you sign in.
- Your password, in hashed form. It is handled by our authentication provider and we can never read it.
- Your username, which you choose and which other players can see.
- Your timezone, taken from your browser, so that a streak day ends at your midnight.
As you use the site we store:
- Each puzzle you attempt, whether you solved it, how long it took, and your rating before and after.
- Your puzzle rating, XP, level, streak and badges.
- Games you submit for review, as PGN text, together with the engine's evaluation of each move and which side you said you played. A PGN usually contains the players' names.
If you sign in with Google, Google tells us your email address. We do not receive your Google password or your contacts.
What we do not do
- We show no advertising and do not sell or rent your data to anyone.
- We do not use analytics or tracking cookies, and we do not build advertising profiles.
- The chess engine runs inside your browser. Positions you analyze on the analysis board are not sent to us.
What other players can see
Signed-in players can see your username, level, puzzle rating, rating history, XP, streak, badges, how many puzzles you have solved and attempted, and the month you joined. This appears on your profile page and on the leaderboards. Your email address, your timezone and the games you have reviewed are never shown to other players.
Cookies and browser storage
We set only the cookies needed to keep you signed in. Your browser also remembers that it has already told us your timezone, so it does not send it again. Neither is used to track you across sites, so we do not show a cookie banner.
Why we are allowed to process this
Under the General Data Protection Regulation (GDPR) we rely on:
- The contract with you: we need your account details and training history to provide the service you signed up for.
- Our legitimate interests: running leaderboards and public profiles, keeping the service secure, and preventing abuse.
Who processes data for us
- Supabase stores the database and handles sign-in and confirmation emails.
- Vercel hosts the site. Like any web host it keeps short-lived server logs that include IP addresses and the pages requested.
- Lichess and Chess.com: when you import games, our server asks their public API for the recent games of the username you typed. We do not store that username separately.
These providers may process data outside the European Union. Where they do, the transfer is covered by the safeguards in their data processing terms, such as the European Commission's standard contractual clauses.
How long we keep it
We keep your account and training history for as long as the account exists. You can delete the account yourself at any time under Settings, or ask us to. Deleting it removes everything attached to it: attempts, reviews, games, XP and badges.
Your rights
You can ask us to:
- send you a copy of the data we hold about you
- correct anything that is wrong
- delete your account and its data (you can also do this yourself under Settings)
- stop or limit a particular use of your data, or object to it
Write to support@chesslit.com from the address on your account and we will act within one month. If you think we have handled your data wrongly, you can also complain to the data protection authority in your country.
Age
Accounts are for people aged 16 or over. If you believe a younger child has made an account, tell us and we will remove it.
Changes
If this policy changes in a way that matters, we will change the date at the top and tell account holders by email or on the site before the change takes effect.
See also the terms of use.