1. Who is responsible
The controller of personal data processed through ChessDare is chessdare.com, Barcelona. For privacy-related requests: playchessdare@gmail.com.
2. Data we collect
We may process: account and profile data (for example email address, username, password hash or authentication tokens you use with us); gameplay and activity data (moves, results, ratings, challenges, timestamps, device/browser type where logged); technical and security logs (for example IP address, error logs); cookies and similar technologies; and content you send us (for example support messages). Exact categories depend on how you use the Service: if you browse without an account we only process technical logs and cookies; if you register, we also process your account data; if you play games, we process gameplay data (moves, results, ratings); if you use the Lab, we process the prompts you submit.
3. Why we use data
We use data to provide and secure the Service (performance of a contract and legitimate interests), prevent abuse and fraud (legitimate interests and legal obligations), improve features, measure aggregate usage and satisfaction (legitimate interests, including analytics as described below), comply with law (legal obligation), and communicate with you about the Service. Where consent is required for optional processing (for example certain marketing or non-essential cookies), we will ask separately. Currently, ChessDare does not use marketing cookies or send promotional emails; if this changes, we will request your explicit consent beforehand.
4. Cookies and analytics
We use cookies and similar technologies, including analytics, to understand how the Service is used and whether players like the experience. This processing is based on our legitimate interest in measuring and improving ChessDare. The analytics cookies we use do not contain any personal data.
5. Disclosure
We may disclose information if required by law or to protect the rights, property or safety of users, the public or ChessDare. We do not sell your personal data within the meaning of the GDPR and applicable Spanish data-protection law.
6. International transfers
If we transfer personal data to countries outside your own, we use safeguards required by applicable law (for example Standard Contractual Clauses or adequacy decisions), our main hosting and service providers operate within the EU/EEA. Where data is transferred outside the EEA (for example to US-based sub-processors), we rely on Standard Contractual Clauses approved by the European Commission or equivalent safeguards.
7. Children
The Service is not directed at children under 13. If you believe we have collected data from someone under 13 without appropriate authority, contact us at playchessdare@gmail.com and we will take reasonable steps to delete it.
8. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" line will change when we publish a new version. Where the law requires, we will notify you of material changes through the Service or by email.