Last updated: August 2026
The controller responsible for data processing on this website is:
Guenther Goerg
Adlitzgrabenstr. 5/2/5
2680 Kurort Semmering
Austria
Email:
ChessLounge is a private, non-commercial project. We process personal data only to the extent necessary to operate the application. We do not use analytics, tracking, or advertising services, and we do not set cookies.
If you create an account, we process the following data:
Confirmation, password-reset, and reminder emails (see below) are not sent directly by Firebase, but via our email provider United Domains AG; in the process, your email address is transmitted to this provider.
Purpose: Providing the user account, authentication, and
sending necessary account emails.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Retention period: Until the account is deleted upon request.
Accounts are additionally deleted automatically: unverified accounts after
7 days without email confirmation, and confirmed accounts after 12 months
without a login (you receive a reminder email in advance, after roughly
11 months of inactivity).
For the online multiplayer mode, the following data is stored:
The data of a game room (player names, move history, chat messages, among others) is readable by anyone with the room code for as long as the room exists.
Purpose: Providing the online multiplayer mode.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Retention period: Account-related data (username, statistics)
until the account is deleted (see 3.1). Room data is automatically deleted
after the game ends, or after 7 days at the latest.
If you send us a message via the feedback form in the app, we process:
Purpose: Handling your feedback and preventing abuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in
support and abuse prevention).
Retention period: The message text is forwarded by email
to us and is not stored in the database. The timestamp stored for abuse
detection (against IP address or UID) is continuously overwritten and is
used only for short-term rate limiting.
When ChessLounge is loaded, parts of the technical infrastructure (Firebase SDK) are loaded from servers operated by Google Ireland Limited. In the process, your IP address is transmitted to Google. This is technically required to provide the application.
Provider: Google Ireland Limited, Gordon House, Barrow
Street, Dublin 4, Ireland.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in
operating the application).
Google/Firebase privacy policy:
policies.google.com/privacy
ChessLounge stores the following data exclusively locally in your browser:
This data never leaves your browser and is not transmitted to our servers. You can delete it at any time via your browser settings.
If you make a voluntary donation via the donate button, you will be redirected to the website of PayPal (Europe) S.à r.l. et Cie, S.C.A. ChessLounge does not receive any payment or account data in the process. PayPal is responsible for processing this data.
PayPal privacy policy: paypal.com/webapps/mpp/ua/privacy-full
ChessLounge does not set cookies and does not use analytics, tracking, or advertising services (e.g. Google Analytics, Facebook Pixel, or similar).
You have the following rights regarding your personal data:
Please send requests to:
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority depends on your place of residence:
Transmission between your browser and our servers is carried out exclusively via an encrypted HTTPS connection. Passwords are hashed by Firebase Authentication and are not readable by us.
We reserve the right to update this privacy policy as needed, for example when the app's features or legal requirements change. The current version is always available on this page. The date of the last update is shown above.