Privacy policy.
How CHESSYNIGHT handles information when you browse the club website, sign in, play puzzles, or register for activities.
Last updated: 15 October 2026
You can browse events and play puzzles as a guest. Google sign-in is optional and provides your club account identity. Your chosen nickname and challenge results may be public; your account email is not displayed on the public leaderboard.
For privacy questions, contact CHESSYNIGHT on WhatsApp.
1. Information we handle
- Google sign-in: your Google account identifier, email and basic profile information, which may include your name and profile picture. Supabase processes these to authenticate you and maintain your session. The integration does not request Gmail messages, Drive files, contacts or calendars.
- Club profile: your account identifier, chosen public nickname and account status. Your private account interface may show your email.
- Puzzle activity: your entered nickname, puzzle set, moves, results, score, session identifiers and timing. Results submitted to a leaderboard can be public. Browser storage may retain practice progress, mistakes and preferences. When signed in, puzzle checkpoints and practice history, including mistakes, can sync to your private account so you can resume on another device. These private saves do not award leaderboard points. Timed challenges started while signed in are also linked to your verified member account; the club backend checks completed solutions before a result receipt is stored in your private result history.
- Registrations: information submitted for an event, lesson or tournament, including name, email, optional phone number, rating where requested, selected activity, registration time and check-in status.
- Messages and media: information you send the club, and photos or captions published in the gallery. Contact us about any identifiable photo that concerns you.
- Technical information: hosting, authentication and security providers may process IP addresses, browser details, request logs and security cookies to deliver and protect the service. If you enable Android notifications, the club stores your browser's push-subscription endpoint to send club alerts.
New activity registrations made while signed in are linked to your verified member account. Your private My bookings view includes the activity, date, venue, booking reference and registration status. Registration contact details stay in the club’s existing organiser system. Existing guest and external bookings are not automatically claimed by email.
2. How we use information
We use information to sign you in, manage your profile, run and score puzzle sessions, display leaderboards, manage registrations and attendance, respond to enquiries, deliver requested notifications, and investigate errors or misuse.
Google account information is used for sign-in and the account features described here. We do not sell Google user data or use it for targeted advertising. Google handles your Google password; the club does not request it.
3. What other people can see
Your chosen nickname, submitted score and completion time may appear publicly. Choose a nickname you are comfortable sharing. Registration contact details and account email are not part of the public leaderboard. Club administrators with relevant section access can view information needed to manage their activities.
When you share a result, you choose the app and recipient. Shared text may include your puzzle-set link and session summary. Review it before sending.
4. Service providers and external links
Cloudflare hosts the public frontend and supports delivery and security. Supabase provides member authentication and profile storage. Google provides Google sign-in. The club's existing content, registration and challenge APIs run through the Sites platform operated by OpenAI and its hosting infrastructure. These providers process information needed for their functions and may process it outside Malaysia.
WhatsApp, Instagram, TikTok, Google Maps, video and external registration links take you to other providers, whose own policies apply.
Provider information: Cloudflare, Supabase, Google and OpenAI.
5. Browser storage and notifications
Local and session storage support sign-in, returning to your previous page, puzzle preferences, sound settings and saved practice activity. Android app features may cache site files and use a push subscription if you allow notifications.
You can sign out in Account, clear site storage in your browser, and manage notification permissions in browser or device settings. Clearing storage can remove practice progress and sign you out. Signing out on one browser does not sign you out on other devices.
6. Retention and protection
Records can remain while used for accounts, activities, results, support or security. There is currently no automatic deletion schedule for all club records. Contact us to request removal. Backups and provider records may follow their own retention cycles; some information may need to be retained for legitimate operational or legal reasons.
We use HTTPS, authenticated administration and access controls for member records. No system can guarantee absolute security.
7. Your choices and requests
You can continue as a guest, edit your nickname, sign out, and revoke CHESSYNIGHT access through your Google account settings. Revoking access or clearing browser storage does not automatically delete information already stored by the club.
To request access, correction or deletion of your information, cancel a registration, or raise a photo concern, message CHESSYNIGHT on WhatsApp. Tell us which account or activity is involved. We may need to verify that the information belongs to you. Do not send passwords, sign-in codes or unnecessary identity documents.
8. Policy updates
We will update this page when the website's information-handling practices change. The date above identifies the latest version.