Privacy Policy

This policy explains what data Chess2Story collects, why we collect it, and what choices you have. We aim to collect the minimum we need to operate the service.

What we collect

• Account data. When you sign in with Google, we receive your name, email address, and profile image from Google's OAuth response. We store these to identify your account.
• Game data you submit. PGN text, chess.com / lichess URLs, player names, and any titles or descriptions you add. Submitted games are private to your account by default.
• Generated content. Stories, comics, coach reviews, and audio that you generate. Stored against your account so you can return to them.
• Payment data. Subscription status, billing period, and credit balance. We do not store card numbers — those are held by Stripe under Stripe's privacy policy.
• Operational logs. Server logs (request paths, status codes, timestamps), generation traces (model, token counts, latency), and error reports. Used to debug and improve the service.

How we use it

• To run the chess analysis and content-generation pipeline.
• To bill subscriptions and one-off purchases.
• To debug failures and improve quality.
• To send transactional email related to your account (sign-in, receipts, generation completion). We do not send marketing email without your consent.

Third-party processors

We use the following third parties to run the service. Each processes only what they need for the function listed.

• Google — OAuth sign-in.
• Stripe — payment processing, subscription billing.
• Anthropic, Google Gemini, DeepSeek — large-language-model inference. Your submitted PGN and any generation settings are sent to these providers as part of generating content. We do not knowingly send personally identifiable data beyond what you place in titles, descriptions, or player names you supply.
• Lulu — print-on-demand book fulfilment, when you order a physical book. Lulu receives the book file and your shipping address.
• Google Analytics 4 — aggregated usage analytics (page views, traffic sources, basic device info). We use this to understand how visitors find and use the site. See our Cookie Policy for the specific cookies set and how to opt out.

Cookies

We set essential cookies for sign-in sessions and CSRF protection. Stripe sets cookies on payment pages. See our Cookie Policy for details.

Retention

Account data and generated content are retained while your account is active. If you delete your account, we remove account data within 30 days. Server logs are retained for up to 90 days.

Your rights

Depending on where you live (e.g., EU/UK GDPR, California CCPA), you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email privacy@chess2story.com.

Changes

We may update this policy. Material changes will be flagged on this page and via email if you have an active account.

Contact

Questions? Email privacy@chess2story.com.