Privacy policy

Last updated October 18, 2026.

This policy explains what Primal Chess (“we”, “us”) collects when you use primalchess.com and the training chamber, why we collect it, and the limits on that data. It is written so you can see the boundaries, and so we can enforce them.

Who this covers

It covers visitors, people who type a Chess.com or Lichess username, people who paste a PGN, and people who create an account. If you use the product for someone else, you are responsible for having their permission.

What we collect

Account data, if you sign in:

• Email address, used to send a one-time sign-in code.
• The name you set, or the part of the email before the @.
• An optional Chess.com or Lichess handle you choose to save.
• Decks, studies, openings, training sessions, messages, and the progress needed to sync an account between devices.

Game data you ask us to read:

• Public games from Chess.com or Lichess for the handle you type. We never ask for, and you must never give us, your Chess.com or Lichess password.
• A PGN you paste, including the headers and moves in that text.

Usage data:

• Pages you open, approximate time, the campaign tags on the link you clicked (utm_source, utm_medium, utm_campaign, utm_content, utm_term), and a creator code when the link has one.
• Product events such as viewing the hero, submitting a username, seeing an analysis, and completing sign-in. These can include which headline was on the page.
• Standard server logs: IP address, user agent, and the time of the request. Hosting providers keep these to run and defend the site.

What we do not collect

We do not collect chess-site passwords, payment card numbers in this version of the product, government IDs, or precise GPS. We do not buy marketing lists. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Why we use it

We use the data to:

• Show a public game and the move that cost the point.
• Send a sign-in code and keep you signed in.
• Save training so a signed-in account can resume on another device.
• Coach you from your own history: streak, accuracy, and due reviews.
• Measure which pages and ads lead to a real signup.
• Secure the service, block abuse, and fix failures.
• Comply with law and answer a lawful request.

The legal bases we rely on, where a law requires one, are: performing the service you asked for, our legitimate interest in running and securing the product, your consent where we ask for it, and legal obligation.

Cookies and local storage

A session cookie keeps you signed in. It is httpOnly. A first-party cookie (pc_ft) remembers the link that first brought you here (campaign tags, creator code, and the referring site's name). If you create an account, we save it with your account so we know which links work. No third-party trackers. The browser may also store decks and progress locally when you are not on a cloud-synced plan. You can clear cookies and site data in the browser. Clearing them signs you out and can remove unsynced local progress.

Who else sees it

Service providers process data only to host the site, store accounts, and deliver sign-in email. They may not use it for their own marketing. Public games stay on Chess.com and Lichess; we request them when you ask. A deck or position you mark as shared can be opened by anyone with the link. Do not put private information in a shared deck, a username field, or a pasted PGN.

We may disclose information if the law requires it, to protect the rights and safety of players and the service, or as part of a merger or sale of the product, in which case this policy still describes the data.

How long we keep it

Account data stays until you delete the account or we close it. Sign-in codes expire within minutes and are not a password you reuse. Server logs and analytics are kept only as long as needed to operate, secure, and understand the product, then deleted or aggregated. Local data on your device stays until you clear it.

Security

We use access controls, encrypted transport, and a session that the page script cannot read. No method of storage or transmission is perfectly secure. You are responsible for the inbox that receives your sign-in codes. If you believe an account was accessed without permission, write to us from that inbox.

Children

Primal Chess is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child gave us personal information, contact us and we will delete it.

Your choices

You may ask to access, correct, or delete the account data we hold. Email the address on the Contact page from the inbox on the account. We may need to confirm it is you. Deletion removes the account and its synced library. We may retain a minimal record where the law requires it, or where we need it to resolve a dispute or enforce these terms. You can stop using the product at any time.

If you are in the EEA, UK, or a similar region, you may also have the right to object, restrict processing, or lodge a complaint with a supervisory authority. We will not discriminate against you for making a lawful request.

International use

The service is operated from the United States. If you use it from somewhere else, your information will be processed in the United States and wherever our providers operate. Those places may not have the same privacy laws as your home.

Changes

We may update this policy. The date at the top will change. If a change is material, we will post it on this page. Continuing to use the product after the update means you accept the revised policy.

Contact

Questions and deletion requests go to the address on the Contact page. Write from the email on the account.