Privacy Policy

Last updated 1 November 2026

ConvertChess ("we", "us") is an endgame chess training app for adults and younger players. This notice explains what personal information we use, why, and the choices available to you. If anything is unclear, email support@convertchess.com and ask.

Who operates this service

ConvertChess is operated by Jamie Rutherford, trading as ConvertChess, a sole trader based at 7 Woodlands Grove, Bathgate, West Lothian, EH48 2UH, United Kingdom. Contact: support@convertchess.com.

What we collect

  • Account info. Email address, and if you sign in with Google, your Google account ID and profile photo. Authentication is handled by Supabase — we never see or store your password.
  • Profile data. The display name, chess-piece avatar, optional uploaded profile image, membership month, rating and leaderboard visibility choice you set.
  • Training activity. Course progress, attempts, scores, streaks, accuracy, recommendations and arcade results.
  • Public information you choose to share. Leaderboard sharing is off by default. If you turn it on, your display name, chess-piece avatar, membership month and arcade results can appear publicly. Do not use your real name if you want to remain private. Turning sharing off hides your profile and scores.
  • Billing records. Lemon Squeezy is the merchant of record. We receive customer and subscription identifiers, plan, status, trial, renewal and cancellation dates, but not full card details. If a checkout link contains an aff or UTM campaign tag, we save that tag with the billing record so we can tell which campaign or creator led to the sale.
  • Anonymous product counts. We count product actions (for example a check-up finished or the pricing page opened) directly into daily totals by page and campaign. We do not retain an individual event record. No identifier is created or sent, and a single visit can't be picked out of the totals.
  • Service and security information. Request, quota and anti-abuse records, and minimised crash reports such as a stack trace, page, browser/device details and IP information processed by our infrastructure. We do not use session replay.
  • Email records. Administrative message type, time, delivery status and provider message ID.

Why we collect it, and our legal basis

  • Providing the service — authentication, saved progress, recommendations, subscriptions and features you request. Legal basis: performance of our contract with you, or steps requested before entering it.
  • Security and reliability — preventing abuse, enforcing limits and fixing faults. Legal basis: our legitimate interests in securing and operating ConvertChess. We balance those interests against your rights and minimise what is collected.
  • Administrative emails — account confirmation and password-reset emails, support replies and billing/trial notices. Legal basis: contract performance.
  • Training emails — when you create an account we send one welcome email (with your check-up weak spot and a free lesson) if you haven't been back after a few days, one practice reminder; and a week after an Endgame Rating Test, one reminder to retest (one per test you take). We tell you about this when you sign up, and every one of these emails has a one-click unsubscribe link. Legal basis: our legitimate interests in helping you use the service, under the "soft opt-in" rules for electronic marketing (PECR). We do not send abandoned-checkout emails.
  • Legal and accounting duties — responding to lawful requests and retaining records where required. Legal basis: legal obligation.

We do not sell personal data or use session replay.

Cookies and similar technologies

ConvertChess uses browser local/session storage for sign-in, security, game progress and preferences such as board theme. These are needed to provide the features you request or remember your settings.

We load Google Analytics and Google Ads tags to measure how many visits lead to sign-ups and trials. In the UK, the EEA and Switzerland they run in a cookieless mode: they set no cookies and store no identifiers on your device. Elsewhere (for example the US, Canada, Australia and New Zealand) they may set Google measurement cookies, so we can see which of our ads led to a sign-up or trial. They are never used to personalise ads. We don’t send them anything if your browser sends Global Privacy Control or “Do Not Track”, or if you opt out below.

We retain anonymous daily totals for product actions, page paths and campaign labels. These counters do not use cookies, browser identifiers, account identifiers or session identifiers and cannot distinguish one visitor from another.

Anonymous product counts: On

Do not sell or share my info: Not opted out. Opting out stops Google measurement on this browser and removes its cookies.

Who we share it with

  • Supabase — database, authentication, file storage and account data.
  • Google — authentication, only if you choose “Continue with Google”; and Google Analytics and Google Ads measurement of visits, sign-ups and trials (cookieless in the UK, EEA and Switzerland).
  • Render and Cloudflare — application hosting, delivery, security and network logs.
  • Lemon Squeezy — billing and subscription management (merchant of record for Premium payments).
  • Resend — administrative and account emails.
  • Sentry — minimised error monitoring without session replay.

We do not sell personal information. Providers may process it outside the UK. Where a restricted transfer occurs, we use an applicable UK adequacy decision or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum. You may ask us for information about the safeguard used for a particular provider.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or export (portability) the personal data we hold about you, and to object to processing based on our legitimate interests.

You can delete your account from Account. This cancels an active subscription and removes active account, profile, progress and score records. Providers may retain limited backups, security logs, delivery records or transaction records for the periods described below or where legally required. If you'd rather we do it for you, or you want a copy of your data first, email support@convertchess.com.

If you're unhappy with how we've handled your data, you can also complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Data retention

Account, profile and training data are kept while your account is active. Cost telemetry is deleted after 12 months; our own email-send ledger after 12 months; security and quota incident logs after 90 days; and single-use arcade security records after 30 days. Sentry error reports are retained for no more than its hosted plan's 90-day maximum. Email and hosting providers may retain their service records under their published terms, and provider backups may persist temporarily on their normal backup cycle. Lemon Squeezy may retain transaction and tax records for its legal obligations as merchant of record. Truly anonymised aggregate statistics may be kept because they no longer identify anyone.

Children

Children may use ConvertChess. Privacy is high by default: visitor profiles and advertising analytics are not used, leaderboard sharing is off, and session replay is not used. A parent or guardian should help a child under 13 create or manage an account. Purchases must be made or approved by an adult. Children and parents can contact us to access or delete an account. Do not put a child's real name or photo in a public profile.

Changes to this policy

We will update the date above and provide a prominent notice before a material new use of personal information begins. Where consent is required, we will ask again rather than assume it.

Contact

Questions or requests: support@convertchess.com