Privacy Policy

Last updated: October 23, 2026

This policy explains what information the Chess Second app for iOS and Android ("Chess Second", "we", "us") handles, why, and what choices you have. Chess Second is developed and published by Muhammad Usama Aslam, an individual developer based in Pakistan who publishes under the name Intelgenic. He is responsible for your data under this policy. You can reach us at support@chesssecond.info.

Chess Second has no ads and no analytics or tracking SDKs. We do not sell your data, share it for advertising, or use it to track you across other apps or websites.

Data that stays on your phone

The following stays on your device and is never sent to us:

• Repertoire books you have not backed up
• Training results, misses, statistics and settings
• Games you import, including PGN files and games downloaded from Lichess or Chess.com
• Engine evaluations from the on-device Stockfish engine

This local library file is not encrypted by Chess Second beyond the protection your phone's operating system provides. Your Lichess sign-in token is kept in the phone's secure storage (Keychain on iOS, Keystore-backed storage on Android).

Data we collect

We do not collect location, contacts, photos, browsing history, advertising identifiers or payment card details.

If you have turned on sharing of diagnostics with app developers in your phone's settings, Apple or Google may send us anonymous crash and performance reports. These are not linked to you or your account. You can turn this off in your phone's settings.

Passwords are never stored in readable form. Supabase stores only a salted hash of your password.

Support emails

If you email us, we receive your email address and whatever you include, such as screenshots or PGN files. We use it only to answer you and fix the problem, never for marketing. We keep support emails while they are useful for helping you, and delete them on request.

This website

chesssecond.info uses no cookies, no analytics and no advertising. It is hosted on Netlify, which processes standard request information, such as your IP address and browser type, to deliver and protect the site, and keeps those server logs for a short period.

Sharing books with other people

If you share a book, the people you invite can see it, and editors can change it. Each of them gets a copy on their own phone. If you later stop sharing or delete your account, we cannot remotely remove copies already on someone else's phone.

Data sent to chess sites

Some features talk directly to third-party chess services. You start these requests, and those services handle the data under their own privacy policies.

• Lichess and Chess.com game import. When you refresh games, the username you entered is sent to Lichess or Chess.com to download your public games. The games are saved only on your phone.
• Lichess sign-in. If you link your Lichess account, Lichess gives the app a token, which stays in your phone's secure storage.
• Opening explorer and cloud evaluations. Some features send a board position to Lichess to get move statistics or a cloud evaluation. A position is not linked to your Chess Second account.

Service providers

We use the following companies to run Chess Second. They process data only on our behalf:

• Supabase: account sign-in, cloud backup, sharing and purchase verification.
• Google Sign-In: optional sign-in with your Google account.
• Apple App Store and Google Play: subscription billing. Payments are handled entirely by them.

These providers may only use your data to provide their service to us, and they protect it to a standard at least as strict as this policy. We may also disclose data if the law requires it, after checking that the request is lawful. If Chess Second is ever transferred to a new owner, your data would move with it under this policy, and we would tell you first.

International transfers

Chess Second is run from Pakistan, and our service providers store data on servers that may be in other countries, including the United States and the European Union. When data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, it is protected by our providers' data processing agreements, which include the European Commission's Standard Contractual Clauses.

How we protect your data

All data sent between the app, our servers, Lichess and Chess.com is encrypted in transit using HTTPS. Data stored with Supabase is encrypted at rest. Database rules ensure each account can read only its own data and the books shared with it. Only the developer can access our admin consoles, and only to provide support or keep the service running. The app contains no secret server keys.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authorities as the law requires. You can help by using a strong, unique password and signing out on shared devices. We will never ask for your password by email.

How long we keep data

• Account data and backed-up books are kept until you delete them or delete your account.
• If you delete a backed-up book, its cloud copy is kept for 30 days so you can bring it back, then it is deleted permanently.
• Data on your phone stays until you delete it, delete your account in the app, or uninstall the app.

Deleting your Chess Second account and data

You can delete your Chess Second account and its data at any time, in either of these ways:

1. In the app: open Chess Second, go to More, tap your account, then tap Delete account and confirm. Deletion happens straight away.
2. By email, without the app: email support@chesssecond.info from the address on your account with the subject "Delete my account". We will confirm the request and delete the account within 30 days.

What is deleted: your login, email address and name, the cloud backups of books you own and their moves and comments, your subscription record, any shares you created, and invites sent to your email. Deleting in the app also clears the books, training history, games and Lichess sign-in stored on that phone.

What is kept: we keep nothing tied to your account on our servers. Deleted data may stay in our hosting provider's encrypted backups for up to 30 days before those backups expire. Apple and Google keep their own records of your purchases under their policies. Copies of books you shared that are already on other people's phones stay on those phones.

To delete a single backed-up book without deleting your account, delete it in the app. An email request can't clear data on your phone: delete it in the app, or uninstall the app.

Deleting your account does not cancel a Premium subscription. Cancel it in the App Store or Google Play first.

Legal bases for processing

If you are in the EEA, UK or Switzerland, we rely on these legal bases under the GDPR:

• Contract: to provide the account, backup, sharing and Premium features you asked for.
• Legitimate interests: to keep the service secure, prevent abuse and answer support requests.
• Legal obligation: where the law requires us to keep or disclose data.

We do not use your data for automated decisions that have legal or similarly significant effects on you.

Your rights

Wherever you live, you can ask us to:

• Access a copy of the personal data we hold about you
• Correct data that is wrong
• Delete your data (see Deleting your Chess Second account)
• Export your data. You can export any book as PGN in the app at any time
• Restrict or object to how we use your data

You can withdraw from any optional feature, such as backup, sharing or a linked Lichess account, by turning it off or deleting your account.

To use any of these rights, email support@chesssecond.info from the address on your account, so we can confirm it is you. There is no charge. We reply within 30 days, or sooner where the law requires. If we can't do what you asked, we will explain why, and you can appeal by replying with "Appeal" in the subject. If you are in the EEA or UK, you can also complain to your local data protection authority.

California and other U.S. states: we do not sell your personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not collect sensitive personal information. We will not treat you differently for using your privacy rights. An authorized agent may make a request for you.

Children

Chess Second is not directed at children under 13 and we do not knowingly collect personal data from them. If you are under 13, please do not create an account. If you are between 13 and the age of majority where you live, please read this policy with a parent or guardian. Some countries set a higher age for consent; where they do, a parent or guardian must agree before you create an account.

If you are a parent and believe your child has created an account, contact us and we will delete it.

Open source

Chess Second includes the Stockfish chess engine, licensed under the GNU GPLv3. The app's source code is available at github.com/Usama-Aslam23/chess-second.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your data, we will also let you know in the app. If we ever want to collect new kinds of personal data or use it for a new purpose, we will ask for your consent first where the law requires it.

Data controller and contact

The data controller is Muhammad Usama Aslam, trading as Intelgenic, Pakistan. For any privacy question or request, email support@chesssecond.info.