Privacy Policy

Last updated: 2026-06-19 · Version 2026-06-19

This Privacy Policy explains what information Prism Chess collects, how we use it, who we share it with, and the choices you have. It applies to your use of the Prism Chess website and apps.

1. Information we collect

We collect only what we need to run the service:

Account information: your email address and a hashed password (or, if you sign in with Google, an identifier and basic profile data returned by Google such as your name and profile picture).
Profile: the username, display name, avatar (uploaded photo or chosen symbol), and preferences you set during onboarding or in your profile.
Gameplay data: the variants you create, your published pieces, forum posts and comments, friendships, direct messages, matches, moves, ratings, and other activity that makes the service work.
Notification tokens: if you enable browser push notifications, the push subscription returned by your browser, plus a short summary of the device or browser so we can remove dead subscriptions.
Technical data: IP address, user agent, language, and basic request logs used for security, abuse prevention, and debugging.
Consents: the version of the Terms and Privacy Policy you accepted, the timestamp, your age confirmation, and your marketing, community, and gameplay notification opt-in choices.

2. How we use it

To run the core gameplay and community features.
To authenticate you and keep your account secure.
To send gameplay-related notifications (your move, challenge accepted, new direct message, friend request) when you have opted in and granted browser permission.
To send you product updates about Prism Chess if you opted in.
To send periodic community updates (forum highlights, popular variants) if you opted in. We don’t commit to a fixed schedule.
To detect, investigate, and prevent fraud, cheating, and abuse.
To comply with legal obligations and enforce our Terms.

We don’t sell your personal information, and we don’t use it for third-party advertising.

We share data only with vendors we need to operate the service, and only for that purpose:

Hosting and database: Lovable Cloud (which uses Supabase for authentication, database, storage, and realtime).
Identity providers: Google, only when you choose to sign in with Google.
Push notifications: the push services built into your browser (such as Mozilla, Apple, and Google’s push gateways) when you enable push.
Email delivery: the email provider used to send transactional and (if you opted in) product/community emails.

We may disclose information if we believe in good faith that it is required by law, or to protect the rights, property, or safety of Prism Chess, our users, or others. If we are ever acquired or merge with another company, account data may be transferred as part of that transaction, subject to this Privacy Policy.

4. Your choices

You can change your marketing, community, and gameplay notification opt-ins at any time in your profile settings.
You can turn browser push notifications on or off at any time.
You can edit or remove your profile information, including your avatar.
You can delete published variants, pieces, forum posts, and comments, subject to the survival rules in the Terms.
You can request account deletion (see below).

5. Retention & deletion

We keep account data for as long as your account is active and as long as we reasonably need it for the purposes described above. When you delete your account we delete or de-identify your profile within a reasonable time. Some User Content you have published (variants, pieces, forum posts you contributed to) may remain on the service in a de-identified form so games and discussions others have built on top of it keep working. Backups and security logs may persist for a limited period.

6. Children

Prism Chess is not directed to children under 13 and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us so we can remove it.

7. Security

We use industry-standard measures to protect your data, including encryption in transit, scoped access controls, and row-level security on our database. No online service can be perfectly secure; you are responsible for keeping your account credentials safe.

8. Changes

We may update this Privacy Policy from time to time. When we make a material change we will update the “Last updated” date and the version number above and may ask you to re-accept inside the app.

9. Contact

For privacy questions, data requests, or account deletion, contact us through the in-app help screen or the project owner.