Privacy.
Last updated: April 12, 2026
Who we are
gettitled is a personal chess training service. We’re the data controller for the personal data described below. Contact: [email protected].
Age
gettitled is intended for users aged 16 and over. If you’re under 16, please don’t create an account. We don’t knowingly collect data from anyone under 16, and if we discover we have, we delete it.
Account
When you create an account, we store your email address and a display name. If you sign in via Chess.com, Lichess, Apple, or Google, we receive only the identity information you authorize — typically your username and email. We never receive or store your password from any provider.
Chess game data
gettitled analyzes games you connect from Chess.com and Lichess. Games are fetched via OAuth or the public APIs of those services under their own terms. Your games are stored on our servers in encrypted form, used only to generate your personal analysis and training plan, and never shared with anyone.
What we don’t collect
No third-party analytics. No Facebook pixel. No Google Analytics. No advertising SDKs. No session recording. No cross-site tracking. No fingerprinting.
Cookies
gettitled sets a single httpOnly session cookie when you sign in. This cookie is strictly necessary for authentication — it keeps you logged in between page loads. It is not used for tracking, cannot be read by JavaScript, and expires when you sign out. No cookie consent banner is required for strictly necessary cookies under GDPR.
Subprocessors
We use a small number of external services to operate gettitled. Each only sees the data they need:
— A European hosting provider in Germany (EU) runs our servers and database.
— Lichess.org and Chess.com provide your game data via their public APIs / OAuth.
— Stripe processes payments. We never see or store your card details.
Where your data lives
All data is stored on servers in the European Union, located in Germany. If you access gettitled from outside the EU, your data may be transferred there for processing under standard contractual clauses.
How long we keep it
We keep your data for as long as your account is active. Specifically:
— Account info: until you delete it.
— Game data and analysis: until you delete your account or remove specific games from Settings.
— Backups: encrypted snapshots are kept for 30 days, then permanently deleted.
— Inactive accounts: if you don’t log in for 12 months, we’ll email you a warning. If you don’t return within 30 days, the account and all associated data are deleted.
Your rights
Under GDPR (and similar laws in the UK, California, and elsewhere), you can:
— Access the data we hold on you — ask and we’ll send you everything.
— Correct anything wrong — or just edit it yourself in Settings.
— Delete your account at any time. Deletion removes your profile, all connected game data, training history, and derived analytics within 24 hours (backups within 30 days).
— Export your data in a machine-readable format (PGN for games, JSON for analysis).
— Object to processing or restrict it.
— Complain to your local data-protection authority if you think we’ve mishandled anything.
To exercise any of these, write to [email protected]. We’ll respond within 30 days.
Payments
Payments are processed by Stripe and the Apple App Store. We never see or store your card details. Payment processors are governed by their own privacy policies.
Changes to this policy
If we change this privacy policy in a way that affects your rights or how we use your data, we’ll email you at least 14 days before the change takes effect. Minor wording fixes will just be posted here with an updated date.
Contact
Privacy questions: [email protected].
Anything else: [email protected].