Personal data policy

1. Who is responsible

The person responsible for your data — the data controller — is a named individual, not a company: Dmitrii Aleksandrovich Sevriukov, working from Moscow, Russian Federation. There is no other entity behind ChessNavio and no local branch anywhere else.

Seller

Dmitrii Aleksandrovich Sevriukov

Status

Individual registered for the Russian self-employment tax regime (NPD)

Tax ID (INN)

771542159597

Place of business

Moscow, Russian Federation

Email

support@chessnavio.com

Support hours

Every day, 10:00–19:00 Moscow time (UTC+3)

For questions about how your data is handled, or to exercise your rights, write to support@chessnavio.com. Support answers every day, 10:00–19:00 Moscow time (UTC+3), and within one month at the latest where the law that applies to you sets that deadline.

2. What data is processed

• your email address and a protected record of your password;
• sign-in and security data: time and state of active sessions; IP is stored only as a one-way hash for abuse control, and the raw address and browser are not kept;
• when a game or training session with hints starts: the name of the chess site (for example, Lichess) and a short fingerprint of the game ID, computed in the browser, so that the same game is not counted twice; the game ID itself is not sent to us, and our server stores the fingerprint only as a further one-way hash;
• the names and identifiers of the devices you connect;
• your account settings and the extension options you chose;
• finished games, but only if you turned on sending them to your account history: moves and the board position before and after each move, timing, result, which side you played, the players’ ratings and the time control when the site shows them, and the calculated figures;
• on your device: local and imported games, the Chess.com and Lichess usernames you enter, trainer progress, local allowance counters and stats on your games; using import, the trainer or a report does not by itself send this data to ChessNavio;
• payment records: amount, date, status and transaction number. ChessNavio never receives full card details;
• requests you send to support and the correspondence about them;
• when the extension checks for updates: the installed version number and a flag saying the extension was just installed;
• for product statistics, unless disabled: action, time, section, language, bounded UTM tags and referrer domain; account events are linked to your account; on Free, also a note that the extension showed a used-up import or new-task limit.

3. What stays on your device and direct archive requests

The current position, the calculated variations and the hints are handled by the extension on your own computer and are not sent to a ChessNavio server. A finished game reaches your account history only after you turn that on explicitly.

Importing your own completed games sends a request directly from your browser to the public Chess.com or Lichess archive for the username you entered. The request does not pass through a ChessNavio server and carries no site password, site cookie or OAuth token. The site you chose receives the ordinary network data of that direct request and handles it under its own policy.

Trainer progress, assigned tasks, and import and new-task counters stay in local extension storage. ChessNavio receives no event for an individual import or solved task — only a statistics note that a Free limit is used up (section 8). An imported game is synced to your account only if you separately turned on cloud history before importing it.

Local history is stored only in this browser and is limited in size: when space runs out, the oldest games are removed. Account cloud history is turned on separately and is not controlled by these settings.

Every few hours the extension checks whether a new version has been released by requesting an update file from this site. That request carries only the installed version number, plus an installation flag the first time. It exists so we know how many installations there are and which versions are running. It carries no cookie, no device or user identifier and no address of the chess site where a board is open, and it is not linked to any account.

4. Why the data is processed

• creating an account, confirming your email and signing you in safely;
• providing Free and Pro, and syncing the settings you chose;
• storing, showing, exporting and deleting the history you chose to keep;
• handling payment, issuing a receipt and meeting legal requirements;
• support, preventing abuse and fixing faults.

The legal bases are your consent, entering into and performing the agreement, and duties imposed by law. Your data is not used for marketing email without separate consent.

5. Storage, recipients and international transfer

The main databases and their backups are located in the Russian Federation. That is where your account lives, wherever you are.

If you are in the European Economic Area, the United Kingdom or Switzerland, using ChessNavio therefore means your data is transferred outside that area to Russia. Russia is not a country the European Commission has recognised as offering equivalent data protection, so you should decide with that in mind. The transfer happens because it is the only way to run the account you asked for, and, for the parts that rest on consent, because you gave it. You can withdraw consent and close the account at any time.

Providers of infrastructure, object storage and email may be involved in running the service. The service and its database are hosted at REG.RU; games from cloud history are stored encrypted at Timeweb Cloud, and backups at Yandex Cloud. Each one receives only the data it needs for its specific task and nothing beyond that, under a contract and with security requirements. None of them is allowed to use your data for its own purposes.

Card numbers, expiry dates and CVC/CVV are never collected on this site. Lava processes the payment on its own page and sends ChessNavio the buyer email, invoice details and payment status so that Pro can be switched on and the transaction can be supported. Account email is delivered through hosted email infrastructure, and support email arrives in the same hosted mailbox.

If you write to support, the service processes the content of your message, your return address and anything you chose to attach, in order to deliver and keep the correspondence. Please do not send passwords, payment details, a FEN, a PGN or screenshots of a live game.

Data is disclosed to public authorities only in the cases the law provides for. Personal data is not sold.

6. How long data is kept

Account data is kept while the account exists. Sign-in records and technical logs are deleted or anonymised once the period needed for security and fault investigation has passed. Advertising attribution data is kept for no more than 30 days from the recorded visit. Finished games can be deleted from your account; how many are kept depends on your plan. Payment and receipt records are kept for as long as the law requires.

After you ask for your account to be deleted, the data is removed from working systems once your identity is checked and any mandatory operations are finished. Copies may remain for a while in protected backups until those are overwritten on schedule, and records the law requires are kept until that period ends.

7. Your rights

Whoever and wherever you are, you can ask what is processed about you, ask for it to be corrected or deleted, ask for the processing to be restricted, object to it, and withdraw a consent you gave. Withdrawing consent does not make earlier processing unlawful and does not remove duties to keep records that the law requires.

• access — a copy of the data held about you and an explanation of what it is used for;
• correction of anything wrong or out of date;
• erasure, where the data is no longer needed and no law requires it to be kept;
• restriction of processing while a dispute about accuracy or grounds is sorted out;
• objection to processing that rests on a legitimate interest rather than on the agreement or on the law;
• portability — your account data in a machine-readable file you can take elsewhere.

If you are in the European Economic Area or the United Kingdom, those rights come from your own data protection law and are not granted or narrowed by this page. Write to support to use any of them; you are never asked to explain why. You can also complain to the data protection supervisory authority of the country where you live, work or where you think the problem happened, and you can do that without contacting us first.

8. Security and browser storage

ChessNavio uses access separation, encrypted connections, protected secret storage, backups and logging of significant actions. Strictly necessary cookies and browser local storage are used for signing in. Local games, trainer progress, game stats and counters remain in extension data and are removed when you clear that data or remove the extension through your browser.

ChessNavio collects its own product statistics unless you turn them off. The purpose and legitimate interest are to improve product quality, usability, reliability and support, including access and payment problems, subject to your rights and proportionate safeguards. Silence is not treated as consent. No third-party counters, screen, mouse, form, move or position recording. Data is not sold or sent to advertising systems, and is not used for advertising profiling or retargeting.

Events contain an allowlisted action, time, section and language. Public events may include bounded utm_source, utm_medium, utm_campaign and referrer domain, never full URLs, click IDs or a persistent visitor ID. These are event counts, not exact numbers of people. Account access and payment events are linked to your account ID and are not anonymous. Detailed events: up to 14 days; daily summaries without account IDs: up to 90 days. An incomplete payment attempt does not prove abandonment. Financial records and necessary security logs are processed separately.

When the extension shows a Free account that its game import or new-task limit is used up, it tells ChessNavio only which limit — no games, tasks, usernames or counts. At most one note a day is kept for each limit. If account statistics are turned off, these notes are not recorded.

An optional uninstall reason is counted unless statistics are turned off, with no free text or account link.

Turn statistics off in this browser through “Analytics settings” at the bottom of a public page; the choice is stored locally. Account Settings let you turn off account statistics: this stops collection and deletes linked detailed events. Daily summaries without IDs are not linked back to an account. Deleting an account removes its preference and detailed events. Refusing does not affect Free or Pro. An old explicit browser refusal is respected. Historical advertising attribution is no longer added to and remains subject to its previously stated retention. News emails need separate optional consent and are off by default.

9. Chrome Web Store Limited Use

ChessNavio’s use of information received through Google Chrome APIs and from the chess pages you choose complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. ChessNavio handles that information only for its disclosed purpose: analysing your chess positions and completed games, helping you learn and practise, syncing the data you chose, and keeping those features secure.

This information is not sold, shared with advertising platforms, or used for personalised advertising, lending or any unrelated purpose. People do not read your games or chess-page content unless you explicitly send specific material to support, or access is necessary for security or required by law.

10. Changes to this policy

The current version is always published on this page. Significant changes that need fresh consent are never applied silently: you will be asked to read them before the processing concerned continues.