Privacy Policy

Underwater Games OÜ operates Chess.one and controls personal data. Registry code: 17486604. Registered office: Harju maakond, Tallinn, Kesklinna linnaosa, Estonia.

This policy covers the Chess.one website, applications, online chess, puzzles, analysis, memberships and account services.

1. Information used by Chess.one

• Accounts: email, username, password hash, profile details and linked Apple, Google or Facebook sign-in identifiers. Signing in through another provider supplies the account information authorized during that sign-in.
• Chess activity: moves, game results, ratings, opponents, puzzle attempts, achievements, rewards and preferences. These records support matchmaking, game history, leaderboards and progress tracking.
• Public activity: usernames, public profiles, ratings and games may be visible to opponents, spectators and leaderboard visitors. Consider this before adding identifying details to your profile.
• Purchases: membership status, payment references and transaction records needed to apply benefits and reconcile payments. Stripe processes web payments under its own privacy policy.
• Technical records: IP addresses, browser and device information, session identifiers and security logs support account protection, connection management and abuse prevention.
• Messages to us: contact details and information supplied in support requests.

2. Cookies and browser storage

Chess.one uses cookies and local storage for sign-in sessions, language, board and piece preferences, device identification and saved settings. You can clear or block storage in your browser; doing so can sign you out or prevent settings and account features from working.

3. Purposes and legal grounds

We process data to deliver the service under our contract, protect and improve it based on legitimate interests, and meet legal duties. Where consent is required, you may withdraw it.

Gameplay records let us resume chess sessions, calculate ratings and investigate disputed results or suspected cheating. Account emails support verification and password recovery.

Partner links and the partner programme

Visitors arriving through a partner’s link. When you follow a link or use a code given out by one of our partners, we count the arrival: the partner’s code, the label the partner gave the link, the page you landed on and the name of the site you came from. We do not store your IP address with it, and we set no cookie and keep nothing in your browser for this purpose. If you create an account or buy a membership with a partner’s code, the code is recorded on your account or purchase so that the partner can be paid. Partners see totals only — arrivals, accounts, sales and commissions — never who you are.

Applicants. If you apply to become a partner we keep what you send us: your name, e-mail address, the links to your channels, the audience size and country you state, and any note. We use it to decide on your application and to write to you about it (legitimate interest and steps taken at your request before a contract). An application that is declined or left unanswered is deleted after 365 days.

Partners. For an accepted partner we keep the application, the codes and links we issued, the rules accepted and when, the commissions earned and the payouts made, for as long as the partnership lasts and afterwards for as long as accounting law requires. We write to partners about their application, their first sale and each payout.

4. Sharing and transfers

Hosting, payment and support providers receive data needed for their work. Disclosure may also be necessary for legal obligations or a business transfer. We do not sell personal data. Transfers outside the EEA require applicable safeguards, such as standard contractual clauses.

5. Retention and account deletion

We retain data as needed for service delivery and legal obligations.

Use account deletion to remove your profile and linked sign-in identities. Account deletion anonymizes the account; game records involving other players may remain. Active memberships must be cancelled before self-service deletion. Contact us for help or other erasure requests.

6. Your rights

You can request access, correction, erasure, restriction, portability or object to processing. We normally respond within one month. Complain to your local supervisory authority or Estonia’s Andmekaitse Inspektsioon.

7. Children, security and updates

The service is not directed at under-16s. Contact us about children’s data. We use security safeguards, but cannot guarantee absolute security. Changes appear here.

8. Contact

Email support@underwatergames.com for privacy requests.