1. Who we are
RookWorlds (“we”, “us”) is a chess study and note-taking application available at rookworlds.com. It is operated as a personal project. Questions can be directed to daniel@brandmoves.co.
2. What we collect
- Account data — your email address when you sign up (via email or Google sign-in).
- Chess games — PGN files or games you import from Lichess or Chess.com.
- Notes and journals — text you write inside the app.
- Google contacts — only if you choose to use the optional "Add Google Contacts" friend finder. See section 4 below for exactly how this is used and what we do not keep.
- Player profile — optional information (rating, openings, goals) you provide to personalise your experience.
- Usage events — basic events such as button clicks used to understand how the product is used (no third-party analytics SDK).
- Payment data — handled entirely by Stripe. We receive only a confirmation that payment succeeded and the email address used.
3. How we use your data
- To provide and improve the RookWorlds service.
- To generate coaching. Coaching is computed on-device and on our own servers from a chess engine (Stockfish) and a curated knowledge base. It is deterministic and does not use AI. Your games and notes are not sent to any third-party AI service.
- To process payments via Stripe, if you ever subscribe to an optional paid plan. Stripe’s privacy policy applies to payment processing.
- To authenticate you via Supabase. Supabase’s privacy policy applies to that processing.
We do not sell your data. We do not share it with third parties beyond the service providers listed above.
4. Third-party services and Google data
- Supabase — authentication and database hosting.
- Google — optional sign-in, and the optional “Add Google Contacts” friend finder (see below).
- Stripe — payment processing, only if you subscribe to an optional paid plan.
- Lichess / Chess.com — game import via their public APIs. No account credentials are stored.
- Vercel — application hosting.
Google contacts. If you choose to use the “Add Google Contacts” friend finder, RookWorlds requests read-only access to your Google contacts (the contacts.readonly scope) for the single purpose of finding which of your contacts already use RookWorlds, matched by email address. We do not store your contacts, we do not share them, and we do not use them for advertising or any other purpose. You can use RookWorlds fully without ever granting this access, and you can revoke it at any time from your Google Account.
Limited Use. RookWorlds’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. How we protect your data
We apply the following safeguards to all data you entrust to us, including sensitive data such as Google contacts:
- Encryption in transit. All traffic between your browser and RookWorlds is protected with HTTPS/TLS.
- Encryption at rest. Your account data, games, and notes are stored in a managed Supabase Postgres database that encrypts data at rest.
- Access control. Every table enforces row-level security, so your data is readable only by your own authenticated account. Sign-in is handled by Supabase Auth; we never see or store your Google or email password.
- Sensitive data (Google contacts). When you use the optional contacts finder, your contacts are fetched over an encrypted connection, held only in memory for the moment it takes to match them against existing RookWorlds players by email address, and then discarded. Contact email addresses and the Google access token are never written to our database, never logged (we record only anonymous counts to help diagnose failures), and never shared with anyone.
- Payments. Card details are handled entirely by Stripe, a PCI-DSS certified processor, and never touch our servers.
- Minimization. We request the narrowest access needed (for contacts, read-only
contacts.readonly) and keep only what the service actually needs to function.
6. Data retention and deletion
Your data is retained for as long as your account is active. You can permanently delete your account and all associated data at any time from the profile modal inside the app. Deletion is immediate and irreversible.
7. Cookies and local storage
We use browser local storage to save your preferences (theme, text size, language) and to avoid showing one-time notifications more than once. We do not use advertising or tracking cookies.
8. Children
RookWorlds is not directed at children under 13. We do not knowingly collect personal data from anyone under 13.
9. Changes
If we make material changes to this policy we will update the date above. Continued use of RookWorlds after changes constitutes acceptance.