Privacy Policy

Last updated: May 13, 2026

This Privacy Policy explains how My Chess Bot (“we”, “our”) collects, uses, and shares information when you use our website at mychessbot.com. By using the service, you agree to the practices described here.

1. What we collect

We collect the minimum information needed to operate the service:

• Account information (only if you create an account): your email address and any profile data you provide through Clerk, our authentication provider.
• Payment information (only if you purchase a plan or cosmetic): handled entirely by Stripe. We never see or store your card details — only a Stripe customer reference and subscription status.
• Game history: chess moves, opening selections, results, and the bots you have played. Chess moves are sent to our server engine to compute bot responses and are stored in our PostgreSQL database. Anonymous (guest) game history is retained for 30 days; registered user history is retained until you delete your account.
• Guest session identifiers: if you play without an account, we set a signed HttpOnly cookie (mcb_guest) that identifies your session. It contains a random ID — no personal data.
• Usage analytics (only after you accept cookies): page views, game events, and other usage data via PostHog and Google Analytics 4. Used to understand and improve the service.
• Error reports: we use Sentry to record crashes and unhandled errors so we can fix them. Personally identifiable information is scrubbed before reports are sent.

2. Where data is stored

• Database: Azure Database for PostgreSQL Flexible Server, hosted in the East US region.
• Application servers: Microsoft Azure App Service (East US).
• Payments: Stripe (PCI-DSS compliant; see Stripe’s privacy policy).
• Authentication: Clerk (see Clerk’s privacy policy).
• Email: Resend (only if you opt into the email list).

3. Cookies and similar technologies

We use the following categories of cookies and similar storage:

• Strictly necessary (always on): Clerk session cookies for authenticated users; mcb_guest for anonymous game history; Stripe checkout cookies during a payment flow.
• Functional: theme preferences and cosmetic selections stored in your browser’s localStorage.
• Advertising and analytics(only after you accept the cookie banner): Google AdSense (shown to free-tier users), PostHog, Google Analytics 4. These do not load until you click “Accept” on the cookie banner.
• Error tracking: Sentry runs before consent so we can capture startup errors, but personally identifiable information is scrubbed before reports are sent.

4. Retention

• Guest games: deleted automatically 30 days after the last activity on that guest session.
• Registered user games: retained until you delete your account.
• Deleted accounts: account data is soft-deleted immediately and permanently removed 30 days later. Purchase records required for tax retention are kept for seven years in anonymized form (no link back to the deleted user).

5. Sharing

We do not sell your personal data. We share information with the third-party processors listed above (Azure, Stripe, Clerk, Resend, Google, PostHog, Sentry) only as necessary to provide the service. We may disclose information if required by law or to protect the rights, property, or safety of our users.

6. Your data deletion rights (GDPR & CCPA)

You have the right to access, correct, or delete your personal data. Under GDPR Article 17 (and equivalent CCPA provisions), you may request erasure of your data at any time:

• If you have an account: visit your Account pageand click “Delete my account”. Your data will be soft-deleted immediately and permanently removed after 30 days.
• If you played as a guest: clear your cookies or wait 30 days for the automatic cleanup to delete your game history.
• For any other request: email privacy@mychessbot.com. We will respond within 30 days.

7. Children

My Chess Bot is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on the site. The “Last updated” date at the top reflects the most recent revision.

9. Contact

Questions about this policy or a privacy request? Email privacy@mychessbot.com.