Privacy

Last updated October 2026

Chess Owl is designed to collect as little as possible. There are no accounts and no advertising trackers.

Who is responsible

Chess Owl is run by Nour Jguirim, Entrepreneur individuel, SIRET 999 869 456 00015, TVA FR71999869456, 17 avenue Giacobi, 06300 Nice, France. TVA non applicable, art. 293 B du CGI, who is responsible for your data. Write to [email protected] with any question about it.

What we store

  • Your games (from your upload or the public Lichess / Chess.com APIs) and their analysis, to build your report.
  • Your email address, received from Stripe at checkout, to send your report link and recovery links.
  • A hash of your report link. We never store the link itself, so nobody at Chess Owl can open your report from our database.

Card details are handled entirely by Stripe and never reach our servers.

How long

  • Uploaded PGN files and unpaid quotes are deleted within 7 days.
  • Reports, their analysis and your email are deleted 90 days after the report is ready.
  • Counts of questions asked to the report assistant are deleted after 48 hours. The text of your questions is never stored.
  • Payment records are kept by Stripe as required by law.

Inviting friends

  • Your friends’ email addresses, when you invite them from your report, to send each one invitation. We keep the address until the invitation is used or expires (30 days), or your report is deleted, whichever comes first. Your report shows it masked (fr•••@example.com).
  • A keyed fingerprint of each address, card and chess account (a one-way code that cannot be turned back into the address or card number), to apply the program’s rules: one invitation email per address a month, never to an address that opted out, and no rewards for inviting yourself. Card fingerprints come from Stripe; we never see card numbers.
  • Someone you invite only gets our fixed invitation email, with a link to never receive another. You see whether they ordered through your invitation, never their report.

Who processes data

  • Stripe, for payments.
  • Hetzner (Germany), which hosts our servers and database, and Brevo (France), which sends our emails, under data processing agreements.
  • Cloudflare, which delivers the site and protects it from attacks. On public pages (never on reports or order pages) it also counts visits, without cookies or any identifier that follows you.
  • Sentry, which receives error reports when something breaks, stored in the EU. They hold the page and the error, never your email, your IP address or your report link.
  • Google (Gemini), which writes the coaching text and answers questions to the report assistant. It receives computed chess facts and your questions only — never your email or username — and may use them to improve its services.

Some of these providers are based in the United States; they transfer data under the safeguards that EU law requires.

Your rights

You can ask us to see, correct, export or delete your data, or to delete a report early, by writing to [email protected] or replying to any email we sent you.

If you think we have mishandled your data, you can complain to your data protection authority (in France, the CNIL).