Privacy Policy
Last updated: September 30, 2026
Overview
chess.rodeo provides free chess game analysis powered by Stockfish engine. This Privacy Policy explains how we collect, use, and protect your information when you use our website and Chrome extension.
Information We Collect
Chess Game Data
When you use our Chrome extension or manually import games, we collect:
- Chess.com/Lichess username (public)
- Game PGN (Portable Game Notation)
- Game metadata (date, time control, result, player ratings)
- Opening information and move sequences
Important: We only access publicly available game data. We do not collect any private or personal information beyond your public username.
Analysis Data
When you analyze games, we store:
- Stockfish engine evaluations for each position
- Move classifications (best, excellent, good, inaccuracy, mistake, blunder)
- Accuracy scores calculated using the Lichess formula
- Opening detection results with ECO codes
Technical Data
We automatically collect standard web server logs including:
- IP address
- Browser type and version
- Device information
- Access times and referring URLs
How We Use Your Information
We use the collected information to:
- Provide chess game analysis and insights
- Store your game history and analysis results
- Identify patterns and weaknesses in your gameplay
- Generate aggregate statistics and recommendations
- Improve our service and fix technical issues
- Prevent abuse and ensure service stability
Chrome Extension Permissions
Our browser extension asks for as little as it can. What it holds, and what it sends:
host_permissions
chess.com and lichess.org — to notice that a game has finished, place the button on that site’s own game-over panel, and read that game’s moves from the site’s own public endpoint for it. chess.rodeo — to send those moves for analysis and receive the verdict shown on the button.
cookies
Two cookies are read, both on chess.rodeo: your session token and, once it has expired, the key that renews it — the extension trades that key with chess.rodeo for a fresh session token. The session token is sent to chess.rodeo so the server knows two things: whether your subscription covers a full-game analysis, and which language you chose on chess.rodeo — the button speaks it too. No cookie is written or changed, and no cookie is read on chess.com or lichess.org.
What leaves your browser
The moves of the finished game, which color you played, and your Chess.com or Lichess username — that is the whole request. The username is public and is used for one thing: if the chess.rodeo account that linked it has background analysis turned on, this game is analyzed straight away. No analytics of its own, nothing stored on your device.
Data Storage and Security
Your game data and analysis results are stored in our secure PostgreSQL database. We implement industry-standard security measures including:
- Encrypted connections (HTTPS/TLS)
- Regular security updates and patches
- Access controls and authentication
- Regular backups
Third-Party Services
We interact with the following third-party services:
Chess.com API
We fetch publicly available game data from Chess.com’s public API. Please refer to Chess.com’s Privacy Policy.
Stockfish
We use the open-source Stockfish chess engine running on our servers for analysis. No data is shared with external parties.
Cookies and Analytics
We keep tracking to a minimum. The only cookies we set are strictly necessary for the site to work — for example, to keep you signed in — so we don’t show a cookie consent banner. Our analytics are privacy-friendly and, for most visitors, completely cookieless.
Essential Cookies
These cookies are necessary for the website to function and cannot be disabled. They include cookies that keep you signed in and remember basic preferences.
Analytics
We use two analytics tools, depending on where you are:
- Umami: A privacy-friendly, self-hosted analytics tool used for all visitors. It is cookieless, sets no tracking identifiers, and does not collect personal data or follow you across sites. It also captures masked session replays and aggregate click heatmaps to help us improve the interface: these are cookieless and mask everything you type into forms and text fields, so the content you enter is never recorded.
- Yandex Metrika: Loaded only for visitors in Russia and the CIS, where it helps us understand how the site is used. It may set cookies; these regions fall outside the EU/ePrivacy consent regime.
Data Retention
We retain game data and analysis results indefinitely so we can show you your history and progress. You can delete your account at any time, yourself, from your settings.
Your rights
You can delete your account yourself: account settings → “Delete account”. We delete it 14 days later; until that day everything works as usual and canceling takes one click.
What is deleted
Your email, your Chess.com and Lichess links, settings, repertoires, training plan, mistake cards, puzzles made from your games, PGNs you uploaded and games played on chess.rodeo.
What stays
Your Chess.com and Lichess games and their analyses. These are the platforms' public data, and in our database they are attached to the player’s username rather than to the account. So if you later sign up again and link the same username, those games will be visible to you once more.
What we keep after deletion
A one-way hash of your email and sign-in identifiers: the address cannot be recovered from it, and its only purpose is to stop the free trial being handed out twice. And payment records — without your address or IP — as accounting law requires.
You can export your data from your settings at any time, including before you delete the account.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the “Last updated” date at the top of this page.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Website: chess.rodeo
Email: support@chess.rodeo