Privacy policy
Last updated 17 October 2026
Chessmoose is a free chess training site run by Elias Rockas in Finland, who is the data controller for the personal data described here. Questions or requests: chessmoose1@gmail.com.
The short version
- You can use Chessmoose without an account. Then everything you do stays in your own browser.
- If you create a free account, we store your email address, username and training progress so you can use them on every device. Your data is stored in the EU.
- If you play rated games online, your username, ratings and those games are visible to other players. Your email address never is.
- No ads, no analytics, no tracking and no cookies.
- We never sell your data or share it for marketing.
- You can delete your account and all of its data yourself at any time from your Profile.
Using Chessmoose without an account
To remember your progress, the site saves a few small records in your browser's local storage: finished games against the bots, your puzzle rating and solved puzzles, endgame progress, saved upcoming opponents, your country and display preferences. Without an account this data never leaves your device.
To delete it, open Profile and use “Delete my data on this device”, or clear this site's data in your browser settings.
If you create an account
We process the following data to provide your account:
- Email address, used to sign in, confirm your account and reset your password. We do not send marketing email.
- Username, which is shown to your opponents and on the public leaderboards.
- Password, which is never stored in readable form, only as a secure hash.
- Training progress: your games against the bots, puzzle rating and solved puzzles, endgame progress, saved opponents, opening drills and your chosen country, so they sync between your devices.
- Online games: the moves, clocks, results and rating changes of rated games you play against other players, and your ratings per time control. Games and ratings are public, like on other chess sites.
- Technical sign-in data: the time you signed up and last signed in, and a sign-in token kept in your browser so you stay signed in.
The legal basis is that this processing is needed to provide the account you asked for (GDPR Art. 6(1)(b)).
Service providers
We use a small number of providers who process data only on our behalf:
- Supabase stores accounts and synced progress in its EU data centre in Frankfurt, Germany.
- Cloudflare delivers the website. Like any web host, it handles your IP address and basic request information to serve pages and protect the site from attacks.
- An email delivery provider sends account confirmation and password reset emails.
- Google, only if you choose “Continue with Google”: Google confirms who you are and shares your email address and name with us. We use the email to sign you in and do not show your Google name to other players.
The fonts and the Stockfish engine are served by Chessmoose itself, and Stockfish runs on your own device. No content is loaded from advertising or tracking companies.
How long we keep data
Account data is kept until you delete your account. Deleting it in your Profile removes your account, username, ratings and synced progress from our database immediately, and your name is replaced with “Deleted player” in online games you played. Copies in the provider's technical backups are overwritten within 30 days. If an account is never confirmed, it may be removed after 30 days.
Cookies and browser storage
Chessmoose does not use cookies. The browser storage described above, including the sign-in token, is only used to make features you asked for work, so no consent banner is needed. If we ever add analytics or other optional storage, we will ask first.
Public chess data about players
The opponent prep tool shows publicly available chess information:
- The FIDE rating list: name, federation, title, FIDE ID and ratings of registered players, as published by FIDE.
- Tournament games broadcast on Lichess since 2020: the moves, players, ratings, event and date, released by Lichess as open data (CC0).
We use this data for chess preparation and study, which we consider a legitimate interest, because players and organisers have already made it public for the same purpose. We keep only what the tool needs and do not include birth years or any contact details.
If you are a player and want your entry or games hidden from Chessmoose, email chessmoose1@gmail.com with your name and FIDE ID and we will remove them, normally within 30 days.
Children
Chess is for everyone, and the site can be used without an account. You must be at least 13 years old to create an account, in line with Finnish law on consent to online services.
Your rights
Under the GDPR you can ask to access, correct, export or delete personal data about you, and object to its use. You can delete your account yourself in your Profile; for anything else, email chessmoose1@gmail.com. We reply within one month. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Changes
If this policy changes, the date at the top changes too. Significant changes will be announced on the site, and account holders will be told before they take effect.