Privacy Notice

This Privacy Notice explains what personal information Chess Rating Tracker collects, why we collect it, how we use it, and the rights you have over it. It applies to the website, the web dashboard and the iOS and Android applications.

Chess Rating Tracker is an independent service. We are not affiliated with, endorsed by, or sponsored by Lichess or Chess.com.

We deliberately collect as little as the service can function on. In practice that is three things:

• Account identity from your sign-in provider — the user identifier, email address, display name and profile photo URL supplied by Google, Apple or email/password sign-in.
• Your tracked set — the chess usernames you choose to follow, the platform each belongs to, and any alias, note or ordering you attach to them.
• Technical and diagnostic data — IP address, browser or device type, and error reports, used to keep the service secure and to debug failures.

The ratings, puzzle scores, game counts, activity and profile fields shown in the dashboard are collected from the public APIs of Lichess and Chess.com. That information is already published by those platforms and by the account holders themselves; we retrieve it, store it as a time series, and display it.

Tracked chess accounts are stored once globally rather than per user. That is how the service avoids making the same request many times over, and it means the historical record for an account is shared by everyone tracking it. We do not publish who tracks whom — the list of accounts you follow is visible only to you and to our administrators.

If you are the holder of a tracked chess account and want it removed from the service, contact us and we will deactivate it.

We use the information described above only for the following purposes:

• To authenticate you and keep you signed in.
• To build and display your tracked-player list, charts, comparisons and leaderboards.
• To enforce the per-platform tracking limits.
• To detect, investigate and prevent abuse, fraud and security incidents.
• To diagnose errors and improve the reliability of the service.
• To respond to you when you contact us.

Where data protection law requires a lawful basis, we rely on the performance of our agreement with you for everything needed to operate your account and tracked set, and on our legitimate interests in running a secure and reliable service for diagnostic and abuse-prevention data. Where we rely on consent — for example optional product emails — you may withdraw it at any time.

We do not sell your personal information and we do not share it for advertising. We share it only with the service providers needed to run the platform, and only to the extent they need it:

• Our authentication provider, which handles sign-in and issues the tokens the service verifies.
• Our hosting and database provider, where the application and its data run.
• Our error-monitoring provider, which receives diagnostic reports when something fails.
• Any authority we are legally obliged to disclose to, where that obligation is valid and applicable.

Our infrastructure and service providers may store or process data outside your country of residence. Where that happens, we require appropriate safeguards from those providers so that your information keeps an equivalent level of protection.

We keep your account record and tracked set for as long as your account is active. If you delete your account, your profile, tracked-player subscriptions, aliases and notes are deleted.

Historical snapshots of chess accounts are retained after your account is deleted, because those records are global and shared with every other user tracking the same account. They contain no personal information about you.

Diagnostic logs are retained for a limited period and then discarded.

Traffic to the service is encrypted in transit and data is encrypted at rest. Authentication is handled by a dedicated identity provider, so we never see or store your password. Access to production systems is restricted and administrative actions are recorded in an audit log. No system can be guaranteed perfectly secure, but we treat security as a standing obligation rather than a one-off exercise.

Subject to applicable law, you have the right to:

• Ask what personal information we hold about you and receive a copy of it.
• Have inaccurate information corrected.
• Have your account and its personal information deleted.
• Object to or ask us to restrict certain processing.
• Withdraw consent where processing is based on consent.
• Export your tracked set and its history — the dashboard offers CSV export for exactly this.

We use cookies and browser local storage only for functional purposes: keeping you signed in, remembering your theme and sidebar preferences, and preserving your place in the dashboard. We do not use advertising or cross-site tracking cookies.

The service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Note that tracking a public chess account is not the same as collecting information from its holder — we only ever read what the platform already publishes.

For any privacy question, to exercise any of the rights above, or to request the removal of a tracked chess account, email support@chessratingtracker.com. We aim to respond within 24 hours on business days and, where a formal request is made, within the period required by applicable law.

If you are not satisfied with how we have handled a privacy complaint, you may raise the matter with the data protection authority in your jurisdiction.

We may update this Notice from time to time so that it continues to describe accurately how we collect and use information. The date at the top of the page shows when it was last revised, and material changes will be announced in the dashboard.