← Calculation Training
Calculation Training

Privacy

Calculation Training keeps an email address, what you solved, and nothing it does not need. No analytics, no trackers, no advertising, no third-party scripts — the pages you are reading make no requests to anyone but this server.

Who holds it

Say Chess is the controller of this data. Questions, requests and complaints: saychess1@gmail.com.

What is stored, and on what basis

Your email addressIt is your account — how you sign in and the only way we can reach you. Kept while the account exists. Basis: performance of the service you asked for.
Your display nameShown on what you share. You choose it, you can change it, and it does not have to be your real name. Basis: performance of the service.
What you solvedCommitted lines, ratings, positions dealt to you, quiz answers, the stars you gave positions. Without it there is no rating, no history and no spaced repetition. Basis: performance of the service.
What you shareComments, annotated lines and notes are published under your display name — to signed-in solvers while a position can still be spoiled, and on its public solution page once its review is out. Publish as a solver keeps your name off a line for readers; the server still knows it is yours, so votes, medals and erasure keep working. Your rating sits beside your name only if you switch that on, frozen as it stood that day. The votes and reports you cast are recorded, and the room’s votes on your lines set the rank piece shown beside them. Basis: performance of the service.
Solving without an accountLines you commit without signing up are stored against a random number in a cookie — never a name, never an address. Make an account later and they move into it; otherwise they are deleted once the cookie has expired. Basis: performance of the service you asked for.
Sign-in linksStored as a hash, with the address it was sent to, the time and the network address it was asked from — the last so that nobody can quietly request links to other people’s addresses. A link never opened leaves nothing behind but that row. Basis: legitimate interest in keeping the door safe.
Consent recordsWhen you agreed to this notice or asked for an email, from which address and connection — the proof that we were allowed to. Basis: legal obligation (Art. 7(1)).
The weekly reviewOne email a week on the positions just gone. Sent only if you ticked the box, which starts unticked and is never a condition of anything. Basis: your consent, withdrawable at any moment.
The morning positionToday’s position in your inbox, on and off from your account page. It pauses itself when you stop solving. Basis: your consent, withdrawable at any moment.

No profiling that produces legal effects, no automated decision-making of that kind, and nothing sold or shared for advertising. Your rating is a chess rating.

Who else touches it

Two processors, each doing one job under contract, neither permitted to use your data for its own purposes:

ReplitHosting and the database (United States).
ResendDelivers the sign-in and account emails — it sees the address and the message (United States).

Transfers out of the EEA run on the European Commission’s standard contractual clauses, part of each provider’s data processing terms.

How long

Your account lives until you delete it, or until 24 months pass without a sign-in — then it is deleted automatically, with a warning email a fortnight ahead; signing in during that fortnight resets the clock.

Sign-in links die after 15 minutes, work once, and the row is purged within a week. A stranger’s solves are deleted once the cookie they were stored against can no longer be claimed, 400 days after it was set. Deleted rows disappear from provider backups within about 30 days.

What you can do about it

Everything below is a button on your account page — no request form, no waiting on a human:

See itDownload everything gives you the whole record as JSON: profile, rating, every committed line, deal, quiz answer, star, comment with its annotated line, vote, report, medal, the review schedule, and every consent with its day. (Art. 15 and 20.)
Correct itChange your name or your email address in place. (Art. 16.)
Erase itDelete my account removes all of it — immediately, in one transaction, and without review. (Art. 17.)
Withdraw consentUntick either email. It stops, and the withdrawal is recorded. (Art. 7(3).)
Object or restrictWrite to saychess1@gmail.com and it will be handled within a month. (Art. 18 and 21.)

If you think this has been handled badly you can complain to the data protection authority for the country you live or work in, and you can do that without asking us first.

Cookies

Two, both set by this site, both strictly necessary for something you asked for — which is why there is no consent banner to click away. No analytics, no pixels, and no other site can read or set anything here.

Your sessionSigned, holding your profile name and an expiry, so the server knows the board in front of it is yours. 30 days.
Solving signed outA signed random number, set when the site deals a position to somebody with no account, so it can give you your own work back when you return — and hand it over if you make an account. Not a name, shared with nobody. 400 days.

Separately, your browser keeps your theme, sound and interface preferences in its own local storage on your device. Those never reach the server and are cleared with your browsing data.

Security

Sign-in links are stored only as hashes, expire in 15 minutes and work once. Sessions are signed and expiring. There is no password to steal because there is no password.

Changes

If this notice changes in a way that affects what happens to data already held, the change is emailed to the address on your account before it takes effect.

Calculation Traininghow scoring works the library your accountwhat’s new privacy colophon contact © Say Chess