Effective 3 October 2026.
This policy covers the Caissan Chess app and the pages at caissan.com/cchess. The service is operated under the name Caissan (the “controller” for data-protection purposes). Contact privacy@caissan.com.
What we collect
You give us an account so a kingdom can exist between visits.
- Username. Shown to other players on the map, rankings, and in chat.
- Email address. Used to sign in and to handle account requests. Other players do not see it.
- Password. Stored only as a hash, so we can check a sign-in without keeping the password itself.
- Game data. The boards you hold, your pieces, your vault, your queued orders, and the times you last played, in each realm you join (6-hour, 10-hour, and 24-hour).
- Chat (transmissions). Text you send in sector, city, or world chat, with your username and a timestamp. Other players who can open that chat can read it.
- Reports and blocks. If you report a message or block a player, we store that so we can hide blocked users’ lines for you and review reports.
- Network address (IP). Stored as your last sign-in or API address so we can refuse banned addresses and investigate abuse. It is not shown to other players.
- A sign-in token on your device. Kept in the app’s secure storage so you stay signed in.
- Push notification token. If you allow notifications, we store an Expo device token so we can alert you when a round resolves in a realm where you still have boards or pieces. It is removed on logout or account deletion.
We do not collect an advertising ID, precise location, contacts, or photos. Queued orders stay hidden from other players until the round resolves. After that, the resulting position is part of the shared map. Your username and the boards you hold are visible to other players in that realm. That is the game.
Why we use it
- To run your account and the three realms.
- To resolve rounds, rankings, and the map.
- To run chat and moderate abuse (including bans).
- To notice idle kingdoms, as the rules describe.
- To answer a support or deletion request.
- To keep the service secure (login checks, address bans).
- To send optional round-resolved alerts to your device when you opt in.
We do not sell personal data. We do not show ads. We do not use your data to build an advertising profile. A company that hosts the game servers and database processes this data only so the realms can run (our processor).
How long we keep it
Account and game data stay while the account exists. Chat lines stay in that chat’s recent log (the game keeps the newest lines per channel) until the account is deleted or the line ages out of the log.
When you delete the account, we delete the username, email, password hash, last IP, pieces, vault, orders, push tokens, blocks you placed, and reports you filed. Your chat lines in the realms are removed with the account. Boards you owned are released on the map so the realm can continue; they are not deleted as land. Other players’ pieces stay where they are.
Backups may still hold a copy for up to 30 days, then that copy ages out. We keep a short deletion record (the email address and the date of the request) for 90 days, so we can show the request was completed, and then we delete that record too. Round statistics that cannot be tied back to your username can remain.
Deleting your account and data
Use the delete account page (works without the app), or delete from Profile inside the app. We complete the deletion when the request is accepted — usually at once, and in any case within 30 days — and write to the email on the account when a web request finishes if mail delivery is available.
Stopping a kingdom inside the app ends that empire. It does not delete the account, the email, or kingdoms in the other realms.
Security
The published site and the game API are served over HTTPS. Passwords are stored as hashes. No method of storage is perfect; write to us if you believe an account was accessed without permission.
Children
Caissan Chess is not directed at children under 13. You must be at least 13 to create an account. We do not knowingly collect an account for a child under 13. If you believe we have, email privacy@caissan.com and we will delete it. Where local law sets a higher digital-consent age, you must meet that age (or have a parent or guardian’s consent where the law allows it).
Your requests
You can ask for a copy of the account data we hold, a correction of your email or username, or deletion. Email privacy@caissan.com from the address on the account, and include your username. If you are in the EEA or UK, you may also object to certain processing or lodge a complaint with your local supervisory authority. We respond within a reasonable time and within any deadline the law sets.
International processing
Servers may run in the European Union or another region chosen for hosting. By using the service you understand that account and game data are processed where the hosts are located, with safeguards appropriate to that hosting.
Changes
If this policy changes, the date at the top changes with it. The current text is always this page.
Data safety summary
This table matches what the app collects, so the Play Console data-safety form can follow it.
| Data | Collected | Purpose | Who else sees it |
|---|---|---|---|
| Email address | Yes, required for an account | Account management | Not shown to other players |
| Username | Yes, required | App functionality, account management | Other players, on the map, rankings, and chat |
| Password | Yes, stored as a hash | Account management | Not shown, not shared |
| Gameplay (orders, pieces, boards, vault) | Yes | App functionality | The shared map after a round resolves. Queued orders stay private until then. |
| Chat messages | Yes, when you send them | App functionality, safety | Players who can open that sector, city, or world chat |
| IP address | Yes, last address | Account management, fraud prevention, security | Not shown to other players; used for bans and abuse review |
| Reports / blocks | Yes, when you use those actions | Safety, account management | Operators reviewing reports; blocks affect only your view |
| Location, photos, contacts, advertising ID | No |
Data is not sold. The published service encrypts it in transit. Account deletion is requested at caissan.com/cchess/delete-account.html or in the app Profile screen.