Privacy Policy

Data controller

The data controller is Mathieu Morio (ChessPivot), 1 passage Saint-Sébastien, 75011 Paris, France.

Contact: contact@chesspivot.com.

Data we process

The Chess.com / Lichess usernames you provide, and the associated games, imported via their public APIs.

Your email address, if you contact us or subscribe.

Minimal technical data (pages viewed, country and device type), via in-house analytics, without cookies, without storing any IP address and without any personal identifier.

Payment data for the Plus subscription is handled by Stripe; we never store your card number.

Technical error logs (the error message, the page involved, your username, browser and device display configuration), generated automatically when something goes wrong, to diagnose and fix malfunctions.

Purposes and legal bases

Providing the analysis and training service (performance of the contract).

Improving the product and measuring audience anonymously (legitimate interest).

Ensuring the reliability and security of the service and fixing faults, via a technical error log (legitimate interest).

Managing subscriptions and billing (performance of the contract and legal obligations).

Processors

Vercel (hosting), Neon (database), Stripe (payments), Resend (email delivery) and Anthropic (coaching generation from your game positions).

Each provider only accesses the data strictly necessary for its function.

Retention

Your games and analyses are kept while your account is active, within the service limits.

Technical error logs are kept for at most 90 days, then automatically deleted.

Billing data is kept in line with legal accounting obligations.

Your rights

You have the right to access, rectify, erase, object to, restrict and port your data.

To exercise them, email contact@chesspivot.com.

You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Cookies

The site uses no advertising or tracking cookies. Only strictly necessary cookies are set (language preference, site access). As analytics are anonymous and cookieless, no consent banner is required.