ChessRank — Privacy Policy

Information We Collect

When you use ChessRank and choose to link a chess account, the following data is collected:

• Twitch User ID — A numeric identifier provided by Twitch when you grant identity sharing permission. We do not receive your Twitch username, email, or password.
• Chess platform username — The Chess.com or Lichess username you voluntarily enter in the extension.
• Chess ratings — Your Blitz, Rapid, and Bullet ratings, along with any title (GM, IM, FM, etc.), fetched from the public Chess.com or Lichess API.
• Timestamps — When you linked your account and when your ratings were last refreshed.

How We Use Your Information

• Display your chess rating badge next to your name in the extension panel.
• Show your rating on the channel leaderboard.
• Notify other viewers in real time when you link or unlink your account (via Twitch PubSub).
• Cache your ratings temporarily (up to 6 hours) to reduce API calls and improve performance.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:

• Consent — You actively choose to link your chess account and grant Twitch identity sharing permission through Twitch's built-in consent dialog.
• Legitimate interest — Temporary caching of ratings for performance optimization.

Data Storage and Security

• Data is stored in an SQLite database on a server located in the European Union (OVH, France).
• No data is transferred outside the EU for storage.
• All communications are encrypted with HTTPS (TLS) via a Caddy reverse proxy.
• Access to the database is restricted to the extension backend service only.

Data Sharing

• Your chess username and ratings are visible to other viewers on the same Twitch channel — this is the core purpose of the extension.
• We query the Chess.com and Lichess public APIs to fetch your ratings. We do not send your Twitch User ID to these services.
• We do not sell, rent, or share your data with any third parties for advertising, marketing, or analytics purposes.

Data Retention

• Your linked account data is stored for as long as your account remains linked.
• Rating cache entries expire automatically after 6 hours.
• When you click "Unlink account" in the extension, your record is permanently deleted from the database.

Your Rights (GDPR)

As a user in the European Union, you have the following rights:

• Access — You can view your linked data directly in the extension panel at any time.
• Deletion — Click "Unlink account" to permanently delete your data. You may also contact us to request manual deletion.
• Withdraw consent — Unlink your account at any time, no questions asked.
• Portability — Contact us to receive a copy of your stored data in a standard format.
• Complaint — You have the right to file a complaint with a supervisory authority (CNIL in France).

Children's Privacy

ChessRank is not directed at children under 13. Twitch's Terms of Service require users to be at least 13 years old. We do not knowingly collect data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will be revised accordingly. Continued use of the extension after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at thomas@mebarki.dev.