Privacy Policy

To analyze your games, you enter a public Lichess or Chess.com username. Your browser then fetches that account’s public games directly from the Lichess and Chess.com public APIs, and the analysis - including the Stockfish engine - runs locally on your device.

We never ask for your Chess.com or Lichess password. Analyzing games needs only a public username.

To see which features are used, the site records simple anonymous usage events (for example "analysis started" or "connected Lichess on the Play page") tagged with a random ID created in your browser. These events contain no usernames, no email addresses and no IP addresses.

The Play page lets you optionally connect your Lichess account so you can play real Lichess games on the AuditChess board. You sign in on lichess.org itself and approve access there; we never see your Lichess password.

Lichess then gives your browser an access key limited to playing games, sending and receiving challenges, and reading your puzzle statistics. That key is stored only in your browser. It is never sent to or stored on our servers, and the moves you play go directly from your browser to Lichess. Games played this way are ordinary Lichess games: rated games change your Lichess rating.

Disconnecting on the Play page revokes the key on Lichess and removes it from your browser. You can also revoke it at any time from your Lichess account security settings.

You can use every feature without creating an account. In that mode we do not store your game history or analysis on our servers. Any caching used to speed up analysis, along with your repertoire and puzzle progress, happens in your own browser and stays on your device. Clearing your browser storage removes it.

Creating an account is optional and exists only so your progress can follow you across devices. If you sign up, we store the credentials you choose - a username, and an email address only if you sign up with email - together with a securely hashed password. We never store your password in plain text.

Once signed in, we also store the profile data you generate in the app so it can sync: the chess handle you analyze, your saved opening repertoire, and your puzzle rating. You can delete your account and all of this data yourself at any time from your account menu, the Me tab in the app, or auditchess.com/delete-account. Deletion is immediate and permanent. If you can no longer sign in, email team@auditchess.com and we will delete it within 7 days.

The optional AuditChess extension for Chrome runs only on chess.com and lichess.org. It stays inactive while you play. When a game you played ends, it reads what is already on that page (the game ID, the two player usernames, the moves and the result) so it can offer a "Review This Game" button. On Chess.com it gets the moves from Chess.com’s own game data for that game, which your browser loads from chess.com. On player profile pages it reads the username in the address so it can offer a "Scout" button.

Nothing is sent anywhere until you click Review, Scout or the "review last game" shortcut. Then a new auditchess.com tab opens with the game ID, your username, your color and (for Chess.com) the game’s moves in the address, and the analysis runs in your browser as described above.

Your extension settings, today’s win/loss tally, your last 10 games and any images or sounds you upload are stored only in your browser’s extension storage. They are never sent to us, never sold and never used for advertising or tracking. Removing the extension deletes them.

The Android app shows the same AuditChess website inside the app, so everything above applies to it too: games are analyzed on your phone and are not uploaded. The app asks for no access to your camera, microphone, location, contacts, photos or files. It uses internet access, network status (to show an offline screen), vibration (for small haptic feedback) and, only if you agree, permission to show notifications.

If you turn on reminders, we store a notification token issued by Google Firebase Cloud Messaging for your device, together with your time zone (so reminders arrive at a sensible local time), the chess username you last analyzed, your reminder settings and, if you are signed in, your account ID. We use this only to send at most one reminder a day (for example a streak or daily-goal reminder, or a weekly recap). Turning reminders off in the app deletes the token; uninstalling the app makes it invalid, and invalid tokens are deleted automatically. To keep the app fast and partly usable offline, some pages and the chess engine are saved on your device.

Usage events from the app are tagged as coming from the app, the website or an installed home-screen app, so we can see which works better. They still contain no usernames, emails or IP addresses.

Your browser communicates with the Lichess and Chess.com public APIs to download the public games you ask to analyze, and some board positions you study are looked up in the Lichess opening explorer (through our server, without any account details) and Lichess cloud evaluations; their handling of that data is governed by their own policies. Accounts and their associated profile data are stored using Supabase, our authentication and database provider, acting as a processor on our behalf. App notifications are delivered through Google Firebase Cloud Messaging. If you use the optional AI features (the "Explain game" move commentary or the help chat), the relevant text - engine-derived facts about the moves of the game you chose, or your chat message - is sent to an AI provider (Google Gemini or Groq) to generate the response; we do not send your account details. If you choose to make a voluntary support payment, it is processed by Razorpay, which handles your payment details under its own privacy policy; we never see or store your card, UPI or bank details and receive only the payment confirmation (amount, date, and the name and email you enter). The site itself is served by a cloud hosting provider, which may process standard technical information (such as IP address and request logs) as part of delivering any website and enforcing rate limits.

We may update this policy as the product evolves; the "last updated" date above reflects the current version. If you have a privacy question, email team@auditchess.com.