Your privacy at TumbleChess

Last updated September 23, 2026

What we save

You can play as a guest. Guest online games use a private player key stored in your browser. Board preferences are also stored on your device.

If you sign in, Supabase handles authentication. Your sign-in provider shares the identity information needed to authenticate you, such as your email address and profile information. TumbleChess stores a player ID, your chosen display name, a friend code, friends you add, challenges, and saved chess games, including moves, clocks, opponents, and results. Ranked games also store skill ratings, rating uncertainty, game counts, and rating changes.

How this information is used

This information lets you sign in across devices, save and replay games, find friends by code, and challenge them. Your display name and friend code are visible to players who add you or play with you. Ranked players’ display names, ratings and ranked-game counts can appear on the club leaderboard and are used to find opponents of similar strength. Ratings are specific to TumbleChess. Your email is not shown in the friend search or game history.

Player safety

When you block a player, we store the two account IDs and the date so we can prevent new account challenges and matchmaking between you. Reports store the reporting account, reported account, reason, description, any related room code, and review status. Reports are private to the site owner and used to investigate abuse. We also store suspension status, reasons, and private moderation decisions with account IDs and timestamps. These records are removed when an involved account is deleted. Do not include sensitive personal information in a report. Blocks remain until you remove them; reports are retained while needed for review and abuse prevention. Contact support about removal.

Services and storage

TumbleChess uses Supabase for authentication and Sites hosting with Cloudflare infrastructure for the website and game records. These services process requests and may retain operational logs. Sign-in sessions are stored in your browser. TumbleChess does not add advertising trackers or sell player information.

Keeping and removing information

Online rooms can be reopened for seven days. Account game history is retained so you can review it later. Signing out removes your active sign-in session from this browser; it does not delete your saved games. You can initiate permanent account deletion in My club → Delete account when the service is available. Deletion removes your login, profile, friends, challenges, personal game history, ratings and rating records, blocks and reports involving your account. Active online rooms end. Opponents retain their own anonymous game history labelled “Deleted player”. For Apple-linked accounts, Apple sign-in is disconnected before game records are removed. If an external service fails, follow the in-app retry instructions to finish deletion. A minimal record containing the former account ID, a hashed retry receipt, status and timestamp is retained to recover incomplete deletion and prevent stale requests from recreating records. Completed receipts become eligible for cleanup after 30 days and are removed on a subsequent deletion request. Native offline practice and device preferences are separate and can be cleared on the device. For help or removal requests, contact the site owner at cwcowan77@gmail.com from the email associated with your account. Shared game records may also appear in your opponent’s history.

Family play

Parents should supervise children’s use and follow their chosen sign-in provider’s account rules. You can use guest play without creating a chess account. Avoid putting personal information in your player name.