Privacy, explained plainly.

Last updated: 2 September 2026

Chesspresso helps you turn chessboards into editable positions. This policy explains what we process for the app, accounts, saved library, subscriptions, maps, security, and support. We do not sell personal data, show behavioural advertising, or use third-party advertising trackers.

1. Who is responsible for your data

Chesspresso is operated by Senzer. The data controller is TAFNAKJI Elias. Contact us at privacy@chesspresso.eu or 157 RUE DE COURCELLES 51100 REIMS FRANCE.

2. What we process

Account and sign-in data: a Chesspresso account ID, the Apple or Google provider and provider subject identifier, and a hashed email address where supplied. We do not receive or store your Apple or Google password. Production accounts use the supported provider sign-in flows.
Saved chess library data: FEN positions, titles, favourites, orientation, scan type, scan duration, timestamps, and any location that you choose to attach to a saved scan.
Camera and imported photos: camera frames are used to recognise a board on your device. A camera image is not uploaded as part of the normal scan request. When you import a photo, the app may read its location metadata if the relevant setting is enabled; the photo itself remains on your device unless you share it through a separate operating-system action.
Location: with your permission, foreground device location can centre the map or be saved with a scan. You can also enter, search for, change, or remove a location manually. Saved coordinates and their label are synchronised with your library when you use account sync.
Device and security data: installation ID, platform, public keys, device-binding and attestation signals, model-download authorisation, scan-preview usage, request IDs, and security timestamps. These help protect accounts, paid features, model files, and the service from abuse.
Purchases and entitlements: product, subscription or entitlement state, store/provider reference information, and protected purchase-verification records. We do not receive your full payment-card number through the app.
Support and technical information: the contents of a support request and limited request, diagnostic, and abuse- prevention metadata. The current app does not intentionally collect advertising identifiers, behavioural analytics, or crash-reporting profiles.

3. Why we use it

To provide scanning, editing, local analysis, saved positions, map features, synchronisation, support, and account services: necessary to perform our contract with you.
To verify purchases, deliver protected models, prevent fraud and abuse, and keep the service reliable: necessary for our legitimate interests and, where applicable, to comply with legal obligations.
To use device location or imported-photo location metadata: your operating-system permission and the feature choices you make. You can withdraw permission or switch off the related settings at any time; this does not affect processing already completed.
To respond to requests or meet accounting, tax, consumer-protection, security, and other legal duties: our legitimate interests or a legal obligation, as applicable.

4. Maps and location providers

Map features use different services by platform. iOS uses Apple MapKit, Core Location, Apple geocoding, and Apple local search. Android uses MapLibre Native with OpenFreeMap map styles, ArcGIS and EOX satellite sources, and Photon location search with the platform geocoder as a fallback. These providers may receive map tiles, search terms, coordinates, approximate device/network information, or other technical information needed to answer a map request, according to their own terms and privacy notices. Chesspresso does not send your account ID with Android location searches. A provider may nevertheless be able to associate requests with your device or network.

“Locate me” is used to centre the map. It is not sent to the Chesspresso backend for that purpose. A location is sent to our backend only when it is attached to a library item that you choose to sync. Maps are not an emergency, navigation, surveying, or safety service.

5. Who receives data

We use service providers acting for us where needed to operate the product: Apple and Google for sign-in and app-store transactions; Cloudflare and configured hosting, database, cache, encrypted object storage, and entitlement providers for infrastructure and security; and the map and geocoding providers described above. We require appropriate confidentiality, security, and processing arrangements where a provider acts as our processor. We do not sell data or share it for cross-app advertising.

Some providers may process information outside the European Economic Area. Where required, we rely on an adequacy decision, standard contractual clauses, or another lawful safeguard. You can contact us for more information about the relevant safeguard.

6. How long we keep it

Account and synced library data are kept while your account is open and are deleted or de-identified when account deletion is completed.
Authentication sessions, rate-limit entries, and temporary authorisation data expire according to their security windows.
Purchase, entitlement, and billing-event records may be retained as needed for store reconciliation, refunds, fraud prevention, accounting, disputes, and legal obligations. When an account is deleted, the user link is removed where possible, but a transaction reference may remain for those purposes.
Support and security records are kept only for as long as needed for the request, investigation, service protection, or legal obligation. Backups are removed or overwritten on the applicable backup cycle.

7. Your rights

Subject to applicable law, you can request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time. We normally respond within one month, subject to identity verification and any lawful extension. Use privacy@chesspresso.eu or the account-deletion page for the fastest deletion route. You may also complain to your local supervisory authority; in France, this is the CNIL.

8. Security and automated processing

We use access controls, encryption, device-bound keys, rate limits, attestation and platform security signals, and least-privilege service access. No online service can promise absolute security. Board recognition, chess analysis, purchase verification, and abuse protection involve automated processing. These processes do not make decisions producing legal or similarly significant effects about you. Contact us if you need information about a decision or wish to raise a concern.

9. Children and changes

Chesspresso is not directed to children where use would be unlawful without parental involvement. If you are below the applicable age of digital consent, use the service only with a parent or guardian where required. We may update this policy when the service or law changes and will publish the new date above. If a change materially affects your rights, we will provide additional notice where required.