Privacy Policy

When you use Chess Club Manager, we may collect:

• Account information: name, email address, and an encrypted password (if you register with a password) or a Google account identifier (if you sign in with Google).
• Profile information: optional profile photo, biography, public profile slug, links to external chess platforms, and your role within the club.
• Chess activity: tournament participation, game results, rating history, and contribution records.
• Guardian information (for members under 18): contact details of a parent or legal guardian that you provide.
• Technical data: session cookies, IP address, and standard server logs collected automatically when you visit the site.

• Authenticate your account and keep you signed in.
• Display your profile and chess activity to other club members.
• Send transactional emails such as password reset links.
• Maintain tournament records, ratings, and contribution logs.
• Improve the Service and prevent abuse.

If you choose to sign in with Google, we receive your name, email address, and a unique Google account identifier. We use this information solely to create or link your account. We do not access your Gmail messages, contacts, calendar, or any other Google data. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use the Gmail API to send transactional emails (for example, password reset links). Emails are sent only as a direct result of actions you initiate. We do not send marketing emails.

We do not sell your personal data. We share information only:

• With other club members, where you have made profile or game data visible.
• With service providers who help us operate the Service (hosting, database, email delivery), under appropriate confidentiality obligations.
• When required by law or to protect the rights, safety, or property of users or the public.

We retain your account information for as long as your account is active. Tournament and rating history may be retained as part of the club’s historical record even after an account is deactivated. You may request deletion of your personal data at any time by contacting us.

Passwords are stored as bcrypt hashes; we never store plain-text passwords. Reset tokens are SHA-256 hashed and expire after 15 minutes. All traffic to the Service is encrypted in transit using HTTPS.

You have the right to:

• Access and review the personal information we hold about you.
• Correct inaccurate information through your profile settings.
• Request deletion of your account and associated personal data.
• Withdraw consent for Google sign-in by unlinking your Google account.

To exercise these rights, contact us at cxbh1e4@gmail.com.

We use a small number of cookies that are essential to the functioning of the Service: a session cookie to keep you signed in, and a locale cookie to remember your language preference. We do not use advertising or third-party tracking cookies.

Chess Club Manager may be used by members under 18 with the consent of a parent or legal guardian. A guardian’s contact information is recorded when registering a minor. We do not knowingly collect information from children under 13 without verified parental consent.

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when it was last updated. We encourage you to review it periodically.

If you have any questions about this Privacy Policy or our handling of your data, please contact us at cxbh1e4@gmail.com.