Privacy Notice

MyChessMaster (https://mychessmaster.net) · Last updated 15 September 2026

This notice explains what personal data MyChessMaster ("we", "the site") collects, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and the UK GDPR. It applies to everyone who signs in to the site.

Who is responsible

The data controller is Yusuf Pisan. For any privacy question or request, contact [email protected].

What we collect and why

• Your email address and name: to sign you in (a six-digit code or Google sign-in) and to identify your account. Legal basis: performance of the service you asked for (Art. 6(1)(b)).
• Your chess games that you or an administrator import, and the analysis, drills, and preparation derived from them: to provide the coaching features. Legal basis: performance of the service.
• A session cookie: a single signed cookie (sess) that keeps you logged in. It is strictly necessary for the site to work and stores no tracking data. We use no advertising or analytics cookies.
• Sign-in and activity records: the date, your identity, and your IP address for sign-ins and administrative actions, kept for security and abuse prevention. Legal basis: our legitimate interest in keeping the service secure (Art. 6(1)(f)).
• Messages you send us (feedback, access or preparation requests): the content and your identity, so we can respond.

Who processes it for us

We share data only with the service providers needed to run the site, each acting as our processor:

• Netlify: hosting of the website and the application.
• Supabase: storage of per-account training data.
• Resend: sending sign-in codes and notification emails.
• Google: only if you choose "Sign in with Google", to verify your email address.

We do not sell your data or use it for advertising.

How long we keep it

Account data and games are kept while your account is active. Sign-in and activity logs are kept for a limited period for security. Ask us and we will delete your data (see below).

Your rights

You have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these, email [email protected] and we will respond within one month. You also have the right to complain to your local data protection authority.

Changes

We may update this notice; the date at the top shows the latest version.