Chess Line Wars

Privacy policy

Effective August 12, 2026 · Policy version 1.1

Chess Line Wars is operated by Artem Beer. The game does not contain advertising, cross-site tracking, or third-party crash-reporting SDKs. The production website uses privacy-friendly Plausible Analytics for aggregate traffic and game-flow measurement. Offline and native-app play works without analytics or an account.

Data kept only on your device

Offline saves, settings, tutorial and scenario progress, Daily results, and the optional local replay archive are stored in the app or browser storage on your device. They are not uploaded as save data by ordinary offline play. They remain until you remove them in the game, clear the app/browser data, or uninstall the app.

Website analytics

The production website uses Plausible Analytics without analytics cookies or persistent advertising identifiers. Standard pageview measurement includes the page path, referring site, browser, operating system, device category, and an approximate country derived during request processing. All query parameters, hash fragments, and automatic outbound-link URLs are removed before an analytics request; automatic outbound-link, download, and form events are disabled. The analytics integration is disabled on localhost, in the native Capacitor app, and during sign-in callbacks that contain authorization or state parameters.

Game-flow events use bounded properties such as game mode, ruleset, round number, player side, move-or-hold order type, outcome, whole-second and bucketed decision times, match-duration buckets, activity type, and the name and selected preset of a changed setting. Chess Line Wars does not send Plausible account IDs, email addresses, profile text, match IDs, invitation codes, piece IDs, board positions, move coordinates, pending enemy orders, or replay contents.

Data used for online play

When you create an online account, Amazon Cognito stores your email address, password verifier, account-security settings, and an opaque account identifier. Chess Line Wars receives OAuth tokens and keeps the active session in session storage.

The authoritative online service stores the minimum records needed to run matches: private invite status, match membership and side, submitted orders, revealed round history, deadlines, results, matchmaking tickets, an automatically generated public handle, rating and match statistics, leaderboard placement, and achievement progress. Passwords never enter the game client or Chess Line Wars match database.

How the data is used

• Authenticate you and authorize only your side of an online match.
• Create invitations, pair players, resolve matches, reconnect sessions, and enforce deadlines.
• Calculate ratings, leaderboard order, and achievements for public competitive modes.
• Prevent abuse through short fixed-window request counters and diagnose service failures through bounded operational logs.
• Measure aggregate website adoption, match completion, turn timing, feature use, and settings preferences.

Sharing and service providers

Online data is processed by Amazon Web Services services including Cognito, API Gateway, Lambda, DynamoDB, AppSync, CloudWatch, EventBridge, SQS, SNS, S3, and CloudFront solely to provide, secure, monitor, back up, and deliver Chess Line Wars. Aggregate website analytics are processed by Plausible Insights OÜ under its published data policy. Chess Line Wars does not sell personal data or share it with advertisers or data brokers. Service providers are required to protect the data they process for the service.

Retention

• Unclaimed and claimed invite records expire within 24 hours.
• Completed online match state and revealed rounds are scheduled for deletion after 30 days. Active matches are retained until they end.
• Online application and API access logs expire after 30 days.
• Rate-limit counters expire after at most two policy windows.
• Point-in-time backups follow the AWS recovery window and age out automatically.
• Aggregate website analytics remain in the Plausible account until the operator deletes them or changes the account's retention configuration.

Account deletion

Signed-in players can choose Online → Delete online account and confirm by typing DELETE. The service immediately blocks further account use, resigns active matches, removes the Cognito sign-in and player-owned profile, ticket, invite, rate, and membership records, and replaces the account identifier in shared match records with a different one-way tombstone for each match. Those shared completed records then follow the normal 30-day deletion schedule so the opponent can retain the authoritative result temporarily.

A minimal non-public deletion marker is kept for 31 days to reject still-valid signed tokens and make deletion retries safe, then expires automatically. Deleting an online account does not erase offline saves or settings stored only on your device. If you cannot sign in, follow the request path on the account-deletion page.

Your account copy

Signed-in players can choose Online → Download my data to receive a paginated, authenticated JSON copy assembled on the device. It includes the account email and opaque identifier, competitive profile and current matchmaking ticket when present, invite memberships, current rate-limit records, and authorized match history.

The match copy includes your side, your pending order, public result and termination data, and already revealed round orders. It does not include passwords, OAuth tokens, another player's account identifier, an opponent's unrevealed order, internal queue-partition keys, or internal match event payloads. Email support if sign-in is unavailable or a different portable format is required.

Your choices and contact

You can play offline without an account, sign out at any time, download your online account copy, delete your online account in the game, clear local app/browser storage independently, or block analytics requests with browser privacy controls or a content blocker. Plausible does not set an analytics opt-out cookie because this site does not use analytics cookies. For privacy questions or a data request, email Am0n3r@gmail.com. Requests may require verification that you control the relevant account.

Policy changes

Material changes will be published here with a new effective date before newly collected data is used for a materially different purpose.