Privacy Policy
Chess: Pawn to Pro · Last updated: October 17, 2026
This policy explains what information the Android app Chess: Pawn to Pro ("the app", "we") collects, why, who it is shared with, and how you can delete it.
Who is responsible (data controller): Baris Findikkaya, the developer of the app. Contact: bfindikkayaother@gmail.com.
1. Information we collect
| Data | What exactly | Why |
|---|---|---|
| Account | Your email address and a user ID. If you sign in with Google, the Google account you choose; Firebase Authentication then also stores the name and profile photo address of that Google account (we don't show them in the app). Your email is stored in Firebase Authentication only; it is not shown to other players. | Logging in, email verification, password reset. |
| Age and settings | Your birth year, which version of the Terms of Service you accepted and when, and your privacy choices ("Play people I don't know", "Others can find me by username"). The birth year can only be read by you. | Keeping the app 13+, setting up safer defaults and non-personalised ads for players under 18, and recording that you accepted the Terms. |
| Profile | Username, chosen avatar, board theme, online rating, game statistics, lesson progress (XP, rank, streak), Premium status, friends list and friend requests, invite code. | Running the app's features. See section 2 for what other players can see. |
| Games and practice | Moves and results of your games, daily puzzle attempts, online games (moves, the players' usernames, avatars and ratings). While you look for an online match: your rating, the time control and when your app was last active in the search. | Match history, game review, online play, ratings, your personal coach report. |
| Personal coach | A weekly training report made from your games of the last 7 days (results, typical mistakes, up to 5 practice positions) and which of its puzzles you solved. | The coach feature (full report for Premium, a short summary for everyone). |
| Invites | Who invited whom (user IDs) when an invite code is used. | Giving Premium rewards for invites. |
| Purchases | For the Premium subscription: the product ID and the purchase token from Google Play (stored privately, readable only by you). We never see or store your payment details; payment is handled by Google Play. | Activating and checking your subscription. |
| Advertising (free users only) | For free users, a rewarded ad is loaded in the background while the app is open, so it is ready when you choose to watch one. Google AdMob may collect your device's advertising ID, IP address (approximate location), device information and ad interactions. | Showing ads, measuring them, preventing fraud. See section 4. |
| Crash reports | If the app crashes or hits an unexpected error: the error and where in the app it happened, your phone model, Android version, app version and an installation ID. No email, username or game content. | Finding and fixing bugs (Firebase Crashlytics). |
| App integrity check | When the app talks to our server, Google Play confirms that the request comes from the real app installed from Google Play (Firebase App Check with Play Integrity). This uses information about the app and your device; we only receive a yes/no result. | Protecting our server and your data from misuse by scripts or modified apps. |
| On your device only | The date of your last login, an unfinished game against the computer (to continue it later), extra hints, reviews and takebacks earned with ads, and your app settings. | Keeping you signed in for up to 7 days; the app's features. Deleted when you uninstall the app. |
Chess analysis. The easier computer levels run entirely on your phone. For hints, move feedback, lessons, game analysis and the harder computer levels, the chess position (the arrangement of the pieces, as text) is sent to our server, where the Stockfish chess engine analyses it and sends back the result. These requests are linked to your user ID only to prevent misuse (rate limits) and the positions are not stored. Saved games in your match history are analysed on our server to prepare your personal coach report.
Community puzzles. When a position from a game is a good tactics puzzle, it may be shown to all players as a daily puzzle. Only the position (the arrangement of the pieces) and its solution are used – never your name, your username or anything else that links it to you or to the game.
Shared puzzles. When you share an analysis or a puzzle, the app creates a link (chesspawntopro.web.app/p/…) where anyone with the link can play it in a browser. For this we store the position, its solution and the next moves, the short title shown on the card and your invite code – never your name, user ID or anything about your opponent. These links are public and are deleted after 180 days. If someone installs the app from such a link, Google Play passes the invite code to the app so it can be filled in for them; nothing else is read from that link.
We do not use analytics tools, we do not sell your data, and we do not use it for anything other than what this policy describes.
2. What other players can see
Your username, avatar, rating and game statistics are shown to other players (for example friends, people who search for your username, and online opponents). Other parts of your profile listed above (such as your friends list, Premium status and lesson progress) are technically readable by a logged-in player who knows your user ID, but the app does not show them to others. Your email address is never readable by other players.
3. Legal basis (EEA, UK, Switzerland)
- Contract: your account, profile, games, coach reports and purchases – needed to provide the app you signed up for.
- Legitimate interests: rate limits, the app integrity check and crash reports – to keep the app secure and working; and community puzzles – to offer good puzzles to all players, using only positions without any link to you. You can object at any time by e-mail (see section 7).
- Legal obligation: keeping the app 13+ and applying safer settings for minors.
- Consent: personalized ads (asked through the consent form; you can change it any time under Profile → Ad privacy choices).
4. Third-party services and where data is stored
All data is stored and processed by Google, on servers in the United States. If you live outside the US, your data is transferred there. Google protects such transfers with the European Commission's Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. Data is encrypted in transit, and access is limited by security rules.
- Google Firebase (login, database, our server functions including the chess analysis, Crashlytics, App Check) – firebase.google.com/support/privacy
- Google Sign-In (optional login) – policies.google.com/privacy
- Google Play Billing and Play Integrity (Premium subscription, app integrity check) – policies.google.com/privacy
- Google AdMob (rewarded ads for free users) – policies.google.com/technologies/ads. In the EEA, the UK, Switzerland and some US states you are asked for consent (or can opt out) before personalized ads are shown; you can change your choice any time in the app under Profile → Ad privacy choices. Ads in the app are limited to content rated PG at most. For players under 18 (by the birth year you gave) we ask Google for "teen" treatment: no personalised ads. You can reset your advertising ID or opt out of personalized ads in your phone's settings.
5. How long we keep data
- Account, profile, games and invites: while your account exists (see section 6 for deletion).
- Coach reports: the last 4 weekly reports; older ones are deleted automatically.
- Server logs (may contain your user ID, e.g. for purchases and coach reports): about 30 days.
- Crash reports: up to 90 days.
- Data on your device: until you uninstall the app (or it is replaced, e.g. a finished game).
6. Deleting your account and data
In the app: Profile → Delete account. This permanently deletes your login, profile, username, game history, puzzle history, coach reports, invite data and purchase details, and removes you from your friends' lists. Online games that already finished stay in your opponents' history, but your user ID, username and avatar are removed from them. Your opponents' own match history may still show the username you had at the time of the game.
Without the app: see how to request deletion.
Deleting your account does not cancel a Google Play subscription – cancel it in Google Play to avoid further charges. Google keeps its own purchase records under its policies.
7. Your rights
You can see and change your profile in the app at any time and delete your account. Depending on where you live (for example under the GDPR or US state privacy laws), you may also have the right to access a copy of your data, correct it, have it deleted, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. To use these rights, contact bfindikkayaother@gmail.com; we answer within 30 days. You can also complain to your local data protection authority.
8. Children
The app is not directed at children under 13, and we do not knowingly collect data from them. Everyone is asked for their birth year before using the app; children under 13 cannot continue. If you believe a child under 13 has created an account, contact us and we will delete it.
For players aged 13–17 we use safer defaults: "Play people I don't know" and "Others can find me by username" are off (they can be turned on in Profile → Privacy), and ads are not personalised.
9. Changes
If this policy changes, we will update this page and the "Last updated" date above. See also our Terms of Service.