Privacy Policy – OnlyMove

1. Information We Collect

Account information you provide directly, such as a username, or your Lichess username if you sign in with Lichess.
Repertoire data you create in the product – opening lines, spaced-repetition scheduling data, settings, and activity.
Imported games from Lichess or Chess.com, if you choose to connect an account.
Usage and diagnostic data collected automatically, such as feature usage and error information, to help us find bugs and improve the product.

We do not collect or store your password. When you use a username and password, your password is transformed on your device (PBKDF2-SHA256) into a one-way value that is used only to authenticate you. Your actual password never leaves your browser, and we cannot recover it.

2. How We Use Information

To operate, maintain, and improve the product.
To provide the training, import, and analysis features you use.
To respond to feedback and support inquiries.
To communicate service-related and security messages.
To comply with legal obligations.

3. Data Hosting and Security

Your repertoire is stored on our backend so it follows you across devices.
Games you import are stored locally in your browser (IndexedDB), not on our servers. Clearing your browser data removes them.
Data is encrypted in transit using industry-standard protocols (HTTPS).

4. Data Retention

We retain your account and repertoire data for as long as your account is active. You can permanently delete your account and its stored repertoire at any time from the Settings page. Locally stored games are removed by clearing your browser data.

5. Sharing of Information

We do not sell or rent your personal information.
Connecting Lichess or Chess.com is optional and uses only public APIs with no extra permissions. The Lichess connection uses OAuth and can, if you choose, sign you in. You can disconnect at any time from Settings; logging out and deleting your account both revoke the connection.
We may disclose information if required by law or to protect our rights and operations.

6. Cookies and Analytics

We use analytics and error-diagnostics tools for product analytics and to find bugs. We do not use your data for advertising.

If you send feedback through the in-app dialog, the message text you write is stored with the report. For Lichess sign-ins you may optionally consent to include your Lichess username so we can follow up; that is off by default.

7. Your Rights

You may request access to, correction of, or deletion of your personal information. You can delete your account and its data yourself from the Settings page, or contact us at [email protected].

8. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected].