Privacy policy

Data we collect

Demo request: club name, first name, last name, email, phone (optional), expected number of students and message (optional).

Contact form: name, email and message.

Technical data: your IP address is used when a form is sent, to limit abusive submissions; the host also keeps technical connection logs.

The website sets no advertising cookies. Its traffic is measured without cookies or identifying data (see “Audience measurement”).

Purposes and legal bases

Answering your demo request, presenting the platform and opening your club's space: pre-contractual steps taken at your request.

Answering your messages: our legitimate interest in handling the requests sent to us.

Protecting the forms against abuse: our legitimate interest in keeping the website secure.

Retention periods

Demo requests: three years from the last contact. If your club's space is opened, the data then falls under our contractual relationship.

Contact messages: they are kept in the backoffice for the duration of the exchange, for three years at most, and they also reach us by email.

Technical logs: for the period set by the host, for the security of the service.

Recipients

Your data is intended for the Chessio team at Tiltio. It is never sold or transferred.

It is processed on our behalf by our processors: Microsoft Ireland Operations Limited (Microsoft Azure) for hosting, Google (Google Ireland Limited, Dublin, via Google Workspace) for sending emails, and Umami Cloud for traffic statistics.

When a processor handles data outside the European Union, the transfer is covered by the safeguards set out in the GDPR, such as the European Commission's standard contractual clauses.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and the right to object to processing based on our legitimate interest.

To exercise them, write to contact@chessio.club or use the contact page. We reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Audience measurement

We measure traffic on the website with Umami (Umami Cloud), a cookieless tool: nothing is stored on your device and no identifier follows you from one website to another.

It only produces aggregated, anonymous statistics: pages viewed, referring website, device and browser type, country. Your IP address is not kept.

This measurement is based on our legitimate interest in improving the website. You can object to it at any time, on this browser:

Cookies and local storage

The website sets no tracking cookies. It only stores in your browser (local storage) the theme you chose, White or Black, and your objection to audience measurement, if any.

This setting is strictly necessary for the service you request: it needs no consent and is never sent to us. You can clear it at any time from your browser settings.

Club students

Club space: when you join a club's space on Chessio, on the web or in the mobile app, we process your account data (email, username, first and last name if provided, optional phone number, profile picture), your activity in the club (lessons followed, progress, exercises, experience points, participation in live lessons and tournaments), your posts and messages, and your subscription.

The club's role: your club decides how this data is used for its teaching and the management of its members; it is the data controller. Tiltio hosts and processes it on the club's behalf, as a processor within the meaning of Article 28 of the GDPR, solely to provide the service. It is never sold or used for advertising.

Service providers: Microsoft Ireland Operations Limited (Microsoft Azure) for hosting; Google (Google Workspace) for sending emails; Stripe for payments, Chessio never receiving or storing your card details; Lichess, if you link your account. In the mobile app, notifications go through Apple's or Google's notification service, depending on your device.

Minors: a minor under 15 may only sign up with the consent of a person holding parental authority, who supports them in their use of the service. As live lessons may be recorded as replays, anyone can follow them without turning on their camera or microphone.

Retention and rights: your data is kept for as long as your account exists. You can delete it at any time from your profile; only data the law requires us to keep, such as billing records, is kept for the required period. If your club leaves Chessio, its data is returned to it on request, then deleted. To exercise your rights, contact your club or write to us at contact@chessio.club: we will help it respond.

Changes

This policy may change, for example when a feature is added. The date of the last update is shown at the top of the page.