Privacy Policy
1. Data Controller
The data controller under the GDPR is:
Matthias Jüngel
Kollwitzstr. 76
10435 Berlin
Germany
Email: contact@chessboardapp.com
2. Scope of This Privacy Policy
This privacy policy applies to:
- the Chessboard mobile app (iOS / Android)
- the related website
3. Processed Data
3.1 External Data Processing (Firebase / Google)
To provide online chess games, the following data is stored in Firebase Firestore:
- saved chess games (moves, FEN, move count, timestamps, undo requests)
- player nicknames
- seat assignments
- invitation data (invite code, game ID, inviter name, inviter color, keys)
- “play again” invitation data
Authentication is handled via Firebase Authentication (anonymous).
No real names, email addresses or user accounts are used.
3.2 Local Device Data
The following data is stored locally on the device:
- chosen nickname
- invite key / instance ID
- recent game partners
- app settings
4. Purpose of Processing
Data is processed solely to:
- provide and synchronize online chess games
- invite other players
- resume recent games
- ensure technical functionality
5. Legal Basis
Processing is based on:
- Art. 6(1)(b) GDPR (contract performance)
- Art. 6(1)(f) GDPR (legitimate interest)
6. No Analytics or Tracking
The app does not use analytics, tracking or advertising services.
7. Data Retention and Deletion
- Game data can be deleted in the app.
- Game data is retained for a maximum of 30 days.
- Deletion is handled client-side.
8. Data Recipients
Data is processed by:
- Google Ireland Limited, Dublin, Ireland (Firebase / Google Cloud)
9. International Data Transfers
If data is processed outside the EU, this is done based on EU Standard Contractual Clauses (SCCs).
10. Data Security
- Data is transmitted using TLS
- Data is encrypted at rest (AES-256)
11. Technical Logs
Technical logs (e.g. IP address, timestamps, API access) may be processed for operational security.
12. Children
The app is not directed at children and does not knowingly collect personal data from minors.
13. Automated Decision-Making
No automated decision-making or profiling takes place.
14. User Rights
Users have the right to access, correct or delete their data and to object to processing.
15. Changes
This privacy policy may be updated if necessary.