Privacy Policy

ChessPly (“we”, “us”) generates short video recaps of your lichess games. This policy explains what data we access, how we use it, who we share it with, how we protect it, and how long we keep it.

Data we access

We access and store the following:

• Account info — your email address and authentication details, handled by our sign-in provider (Clerk). We don't store your password ourselves.
• Your lichess username — confirmed via lichess's own OAuth login, not typed in by you. This is how we know which account is genuinely yours.
• A lichess OAuth access token — issued by lichess when you connect your account. Used only to identify your account; stored server-side, never sent to your browser.
• Your public game history — moves, result, opening, and clock times, fetched from lichess's public API for the days we generate a recap.

How we use this data

We use your lichess username and access token to fetch your recent games, analyze them with a chess engine (Stockfish), and generate narration with an AI model to produce a short video recap. That's the entire purpose — providing and improving the recap feature itself. We do not use your data to train machine learning models, for advertising, for credit or eligibility assessments, or for any purpose unrelated to generating your recap.

Who we share data with

Generated recap videos are uploaded to a shared YouTube channel as unlisted (viewable only by direct link, not searchable or shown on the channel's public page), and we email you the link. Account and authentication infrastructure is provided by Clerk; hosting and database infrastructure is provided by Cloudflare. We do not sell your data, share it with data brokers, or transfer it to any third party for advertising, marketing, or any purpose other than operating ChessPly itself.

How we protect your data

Your lichess access token is stored server-side only and is never exposed to your browser or any client-side code. All traffic to and from ChessPly is encrypted in transit (HTTPS/TLS). Data at rest is stored in Cloudflare's infrastructure (D1 database) and Clerk's managed user store, both of which encrypt data at rest. Access to production data is limited to the operator of ChessPly.

Data retention and deletion

We retain your account connection and access token for as long as your account remains connected, so we can continue generating recaps. You can disconnect your lichess account at any time from the connect-lichess page, or revoke ChessPly's access directly at lichess.org/account/oauth/token. To delete your account and all associated data (including the stored access token and any record of your connection), email us at the address below — we'll remove it within 30 days.

Limited Use disclosure

ChessPly's use and transfer of information received from Google APIs (including the YouTube Data API, used to upload recap videos) adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data for advertising, do not sell it, and use it only to provide and improve the recap-generation feature described above.

What we don't do

We never post, message, or take any action on your lichess account beyond reading your public game data — the connection is read-only. We don't request or use your lichess password (the login happens entirely on lichess.org via OAuth; we never see it).

Contact

Questions about this policy or requests to delete your data: mkotsollari@gmail.com.