Privacy Policy
Last Updated: October 2026 • Effective for com.example.chesshub (Android) & com.rakr.chesshub (iOS)
Welcome to ChessHub ("we", "our", or "us"). We are dedicated to providing a luxury, competitive online and over-the-board chess platform across Apple iOS (SwiftUI) and Google Android (Jetpack Compose).
This Privacy Policy transparently outlines our data practices, in strict compliance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), Apple App Store Review Guidelines, and Google Play Developer Policies.
1.1 User Identity & Account Types
Guest Mode ("Visit as Guest")
Users can access all features of ChessHub without providing their name, email address, phone number, or password. Upon selecting Guest Mode, the system generates a random pseudonymous identifier (e.g., guest_a1b2c3d4) and a generic display tag (e.g., Guest #4829). Zero Personally Identifiable Information (PII) is linked to guest accounts.
Phone Number OTP Authentication
Registered players provide a 10-digit mobile number to receive a 6-digit one-time password (OTP) powered securely by Firebase Authentication. Mobile numbers are stored solely for session token verification, cross-device sign-in, and account recovery. Passwords are never used, requested, or stored by ChessHub.
Custom Profiles & Avatars
Players may customize their profile with a display name, unique username, user-typed city string (entered as raw text; no GPS hardware or location sensors are accessed), and their choice among 7 pre-rendered 3D character avatars. If a user uploads an optional custom profile photo, the image is encoded and processed locally as a Base64 string.
1.2 Gameplay & Analytical Data Collection
To ensure genuine competitive matchmaking, anti-cheat validation, and ELO rating integrity, ChessHub stores match telemetry in Google Cloud Firestore:
-
Rating & Ranking Records: We calculate and record standard ELO ratings across Rapid, Blitz, and Bullet time controls using standard FIDE K-factor formulas (
K=32). Historical stats include total matches played, wins, draws, losses, and active win streaks. -
Match Transcripts & Board States: Match transcripts stored in Firestore include Standard Algebraic Notation (SAN) moves (e.g.,
e4,Nf3), Forsyth-Edwards Notation (FEN) board state strings, captured piece arrays, turn clocks, and verified termination types (checkmate, resignation, timeout, stalemate, or mutual draw agreement). -
Matchmaking Queue & Room Data: Active matchmaking entries in Firestore collections (
/players,/game_rooms,/matchmaking_queue) store temporary matchmaking status ('waiting', 'matched'), move indexes, and active room codes for opposing device synchronization.
1.3 Device Hardware, Audio & Permissions
Local Device Audio Isolation
ChessHub plays local acoustic sound effects for legal piece movements, captures, checks, and game terminations. The in-game mute toggle operates strictly at the local device level; muting on Player A's device has zero effect on Player B's device.
Zero Hardware / Location Tracking
ChessHub does not request GPS location, address book/contacts, microphone, camera (outside local profile avatar selection), biometric data, IDFA/GAID advertising identifiers, or background location.
Third-Party Tracking Policy
Our sole third-party cloud infrastructure is Google Firebase (Firebase Authentication and Cloud Firestore). Zero third-party advertising networks (e.g., AdMob, UnityAds) or third-party behavioral analytics trackers (e.g., AppsFlyer, Adjust) are bundled into ChessHub. Your chess matches are entirely private and ad-free.
1.4 Data Retention, Account Deletion & User Rights
Under GDPR, CCPA/CPRA, and App Store guidelines, players maintain full sovereignty over their data:
Account & Data Deletion: Players can purge their profile, phone number, and matchmaking records at any time by navigating to the in-app Side Menu Drawer → Settings & Legal → Delete Account, or by emailing our data privacy officer at support@kabbahub.com. All associated Firestore documents and Firebase Auth records are permanently deleted within 30 days.
Public Leaderboard Anonymization: Upon account deletion, historical match transcripts preserve game integrity by referencing an anonymized record.
Contact Our Privacy Team
If you have questions regarding this Privacy Policy or wish to exercise your rights under GDPR/CCPA, please contact:
Email: support@kabbahub.com
Subject: ChessHub Privacy & Data Safety Inquiry