Chezzle

Privacy & Cookie Policy

Last updated: 22 September 2026

The short version: Chezzle is a free chess puzzle game. We collect what we need to run your account and your games — your email, a username you pick, and your gameplay. If you sign in with Google we use only your email address. We never sell your data, we never show ads, and payments are handled by Stripe, so we never see your card. You can delete your account and its data at any time from inside the game.

1. Who we are

Chezzle (chezzle.cc) is a free chess puzzle game with live duels and clans. Chezzle is the data controller for the information described here. Contact us about anything in this policy at privacy@chezzle.cc.

2. What we collect

You can play without an account. A guest's progress stays on their own device. We only hold personal data about you on our servers once you create an account.

Account: your email address, a password (stored only as a secure hash by our sign-in provider — we cannot read it), the username you choose, and the in-game avatar you pick.
Gameplay: your puzzle rating, duel trophies and level, campaign progress, puzzles you have solved, the moves and results of your duels and boss fights, your gem balance and the cosmetic items you own.
Social: your friends list, the clans you join, direct messages you send to other players, clan chat messages, players you block, and reports you file about other players (the reason and any details you write).
Payments: if you buy gems or a subscription, Stripe processes the payment. We store a Stripe customer reference and your subscription status — never your card number.
Notifications: if you turn on notifications, your browser gives us a push address and encryption keys so we can send them, plus your browser's user-agent. Turning notifications off in your browser stops them.
Product analytics (see section 7): which screens you open and actions you take in the game, the app or website that sent you here (for example a TikTok or Instagram link), and your device and browser type.
Error reports: when the game crashes, a report of what went wrong, your browser and device type, and — if you are signed in — your account ID, so we can fix it.
Server logs: our hosting and security providers record IP addresses and request details for a short time to keep the service running and to stop abuse.

3. Sign in with Google — what we do with your Google data

If you choose Continue with Google, Google shares your email address, name and profile picture with us, using the basic sign-in permissions only (openid, email, profile). We do not ask for access to your contacts, Gmail, Drive, calendar or anything else in your Google account.

How we use it: your email address is used to create your Chezzle account, sign you in and send you account emails (such as password or security messages). Your Google name and picture are kept by our sign-in provider as part of your account record, but the game does not display or use them — you choose your own username and avatar.
Who we share it with: nobody, except the service providers in section 5 that store and run your account for us. We never sell Google user data, never use it for advertising, and never let people read it except where the law requires it or you ask us to.
How long we keep it: until you delete your account.

Chezzle's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use your data, and why we are allowed to

To run the game and your account — saving progress, matching you with opponents, ratings, leaderboards, clans, messages and purchases. We need this to provide the service you asked for (performance of a contract).
To keep Chezzle fair and safe — checking moves on our game server, stopping cheating and spam, and acting on reports (our legitimate interest in a safe, fair game).
To improve the game — product analytics and error reports (with your consent where the law requires it — see section 7 — and otherwise our legitimate interest in fixing and improving Chezzle).
To meet legal obligations — for example keeping payment records.

We do not use your data for advertising, we do not sell it, and we do not share it for cross-context behavioural advertising.

5. Who processes your data for us

These companies run parts of Chezzle on our behalf and may only use your data to provide their service to us:

Supabase — database, sign-in and account storage (United States).
Vercel — hosting and delivering the website (United States).
Cloudflare — the live game server that runs duels and checks puzzle moves, plus DNS and network security (global).
Stripe — payments and subscriptions (United States).
PostHog — product analytics and, where enabled, session recordings (United States).
Sentry — error and crash reports (United States).
Google — only if you choose Sign in with Google.
Your browser's push service (Apple, Google or Mozilla, depending on your browser) — only if you turn on notifications.
Our email providers — sending account emails and forwarding mail sent to our chezzle.cc addresses.

6. What other players can see

Your username, avatar, rating, trophies and level are public — they appear on leaderboards, in duels and on your profile. Your clan membership is visible to other players. Direct messages are visible to you and the person you send them to; clan chat is visible to that clan's members. Your email address is never shown to other players.

7. Cookies, local storage and analytics

Chezzle uses your browser's local storage rather than advertising cookies. It keeps:

Essential: your sign-in session, your game save (so a guest's progress survives a reload), your settings, and your answer to our cookie notice. The game cannot work without these, so they do not need consent.
Analytics (PostHog): an anonymous visitor ID and the link that first brought you to Chezzle, so we can see which parts of the game work and where people get stuck.

Your choice:

In the EU, the EEA, the UK and Switzerland, analytics is off until you say yes — nothing is stored or sent for analytics before you tap Allow on the notice. (We judge your region from your device's time zone, and if we cannot tell, we ask.)
Everywhere else, analytics is on unless you turn it off with No thanks on the notice.
You can change your mind at any time with the Share usage analytics switch in your Profile's settings. Turning it off stops analytics on that device and deletes the stored first-visit record.

Session recordings: where analytics is allowed, PostHog may record how the game's screen is used (taps, scrolling and what was on screen) so we can see where the game is confusing. Anything you type — including your email, password and messages — is masked and never recorded. Turning analytics off stops recordings too.

We do not use advertising or social-media tracking pixels.

8. How long we keep your data

Account and gameplay data: until you delete your account.
Messages, friends, clan membership and reports: until you delete your account. In another player's match history, a game against you stays but is no longer linked to your account.
Payment records: held by Stripe, not by us, for as long as tax and accounting law requires.
Analytics, recordings and error reports: only as long as they are useful for improving and fixing the game, and within our providers' retention limits.
Server logs: a short time, for security and troubleshooting.

9. Your rights and choices

Delete your account: Profile → Delete account. This cancels any subscription and removes your account and everything tied to it from our database — progress, purchases, messages, friends, clans you lead, reports and notification settings.
Access, correct or export your data, restrict or object to how we use it, or withdraw consent: email privacy@chezzle.cc. We will reply within one month.
EU/UK users may also complain to their local data protection authority.
US residents (including California): you have the right to know what we collect, to delete it, and to correct it. We do not sell or share personal information, so there is nothing to opt out of — and we will never treat you differently for using these rights.

10. International transfers

Our providers store and process data mainly in the United States. Where data about people in the EU, EEA, UK or Switzerland is transferred, our providers rely on recognised safeguards such as the European Commission's Standard Contractual Clauses.

11. Children

Chezzle is not directed at children under 13, and we do not knowingly collect personal data from them. Where local law sets a higher age for consenting to data use (up to 16 in some EU countries), anyone under that age needs a parent's or guardian's permission to create an account. If you believe a child has given us personal data, email privacy@chezzle.cc and we will delete it.

12. Security

Data travels over encrypted connections (HTTPS). Passwords are stored only as secure hashes by our sign-in provider, our database enforces per-user access rules, and payment details never reach our servers. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires it.

13. Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we use your data, we will tell you in the game before it takes effect.

14. Contact

Questions or requests: privacy@chezzle.cc. See also our Terms of Service, Refund Policy and About Chezzle.

← Back to Chezzle