Who is responsible
ChessBoost is operated by iCyber AB, company number 559194-2221, Vanadisvägen 24, Stockholm, Sweden, under the PulseLab.media brand. iCyber AB is the controller of your personal data.
Questions and requests go to [email protected].
What we store
If you solve puzzles without an account:
- A random ID kept in a cookie, so the site can count your five free puzzles a day.
- Which puzzles you tried, whether you solved them and how long it took.
- Your time zone, so the daily count resets at your midnight.
- A puzzle rating worked out from your results.
If you create an account, we also store:
- Your email address.
- Your name and Google account ID, if you sign in with Google.
- When you confirmed your email.
- Whether you asked for puzzle and news emails, and when.
Our hosting and network providers log IP addresses and browser details for a short time to keep the service secure.
Why we store it
- To run the puzzle trainer and your account. This is needed to provide the service you asked for.
- To keep the service secure and prevent abuse. This is our legitimate interest.
- To send emails about your account, such as sign-in links. This is needed to provide the service.
- To send puzzle and news emails, only if you ticked the box. You can withdraw that consent at any time in your account.
Cookies
ChessBoost uses only the cookies it needs to work:
- cb_vid: a random visitor ID. Kept for up to 400 days.
- cb_sid: keeps you signed in. Kept for up to 180 days.
- cb_oauth: used for a few minutes while you sign in with Google.
We do not use advertising cookies. Our network provider Cloudflare may set a security cookie to tell people from bots.
Who handles your data
We use these companies to run the service. They act on our instructions:
- Railway: hosting and database, in the United States.
- Cloudflare: network and security.
- Resend: delivery of emails.
- Google: only if you choose to sign in with Google.
We do not sell your personal data and we do not share it for advertising.
Your data is stored in the United States. When data leaves the EU or EEA we rely on the safeguards the GDPR allows, such as the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Account data: until you delete your account.
- Visitor data without an account: removed after 13 months without activity.
- Sign-in links and sessions: removed when they expire.
Your rights
You can see, correct, download or delete your data, object to how we use it, and withdraw consent. Two of these are built into your account page: Download gives you everything we store as a file, and Delete account removes your account, rating and history at once.
For anything else, write to [email protected]. We answer within one month.
If you live in the EU or EEA you can complain to your data protection authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY).
Children
ChessBoost accounts are for people aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, write to [email protected] and we will delete it.
If ChessBoost changes owner
If ChessBoost or its assets are sold, merged or moved to another company, your data may be transferred to the new owner as part of that deal. The new owner must keep handling it as this policy describes. We will tell you by email or by a notice on the site before your data is handled under a different policy, and you can delete your account before that happens.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use your data in an important way, we tell account holders by email.