Calculation Training keeps an email address, what you solved, and nothing it does not need. No analytics, no trackers, no advertising, no third-party scripts — the pages you are reading make no requests to anyone but this server.
Say Chess is the controller of this data. Questions, requests and complaints: saychess1@gmail.com.
| Your email address | It is your account — it is how you sign in and the only way we can reach you. Kept while the account exists. Basis: performance of the service you asked for. |
| Your display name | Shown on your comments. You choose it, you can change it, and it does not have to be your real name. Basis: performance of the service. |
| Google account identifier | Only if you use Sign in with Google: an opaque id and the verified address, so the button finds your account again. Basis: performance of the service. |
| What you solved | Committed lines, ratings, positions dealt to you, quiz answers, the stars you gave positions. This is the trainer — without it there is no rating, no history and no spaced repetition. Basis: performance of the service. |
| Comments | Visible to every signed-in solver under your display name. Includes the annotated line you attach to one, and any note the week won a medal for. Basis: performance of the service. |
| Solving without an account | You can solve here without signing up, and the lines you commit are stored against a random number in a cookie — never a name, never an address. If you later make an account they move into it; if you do not, they are deleted once the cookie has expired. Basis: performance of the service you asked for. |
| Sign-in links | A link is stored as a hash, with the address it was sent to, the time and the network address it was asked from — the last so that somebody cannot quietly request links to other people’s addresses. An address that never opens its link never becomes an account and leaves nothing behind but that row. Basis: legitimate interest in keeping the door safe. |
| Consent records | When you agreed to this notice or asked for an email, from which address and connection. Kept as the proof that we were allowed to. Basis: legal obligation (Art. 7(1)). |
| The Wednesday follow-up | One email a week on the positions of the week just gone. Sent only if you ticked the box, which starts unticked and is never a condition of anything. Basis: your consent, withdrawable at any moment. |
| The morning position | Today’s position in your inbox, switched on from your account page and off from the same tick. It pauses itself when you stop solving. Basis: your consent, withdrawable at any moment. |
There is no profiling that produces legal effects, no automated decision-making of that kind, and nothing is sold or shared for advertising. Your rating is a chess rating.
Three processors, each doing one job under contract, none of them permitted to use your data for their own purposes:
| Replit | Hosting and the database (United States). |
| Resend | Delivers the sign-in and account emails — it sees the address and the message (United States). |
| Only if you press the Google button: it tells us the address it has verified (United States, Ireland). |
Those transfers out of the EEA run on the European Commission's standard contractual clauses, which each of these providers offers as part of its data processing terms.
Your account lives until you delete it, or until 24 months pass without you signing in — after that it is deleted automatically. An email goes first and there is a fortnight between the warning and the deletion; signing in during it puts the clock back to zero.
Sign-in links die 15 minutes after they are sent, work once, and the row is purged within a week of being spent or expiring. A stranger’s solves are deleted once the cookie they were stored against can no longer be claimed, 400 days after it was set. Deleted rows disappear from provider backups within about 30 days.
Everything below is a button on your account page — no request form, no waiting on a human:
| See it | Download everything gives you the whole record as JSON: profile, rating, every committed line, every position dealt to you, every quiz answer, the review schedule, every star, every comment with its annotated line, every vote and report you cast, every medal, and every consent with the day it was given. (Art. 15 and 20.) |
| Correct it | Change your name or your email address in place. (Art. 16.) |
| Erase it | Delete my account removes the profile, the address, the solving history, the ratings, the review schedule, the comments and the votes on them, any medals, and the consent records — immediately, in one transaction, and without review. (Art. 17.) |
| Withdraw consent | Untick either email. It stops, and the withdrawal is recorded. (Art. 7(3).) |
| Object or restrict | Write to saychess1@gmail.com and it will be handled within a month. (Art. 18 and 21.) |
If you think this has been handled badly you can complain to the data protection authority for the country you live or work in, and you can do that without asking us first.
Three, all set by this site, all strictly necessary for something you asked for — which is why there is no consent banner to click away. None of them is an analytics cookie, none is a pixel, and no other site can read or set anything here.
| Your session | Signed, holding your profile name and an expiry, so the server knows the board in front of it is yours. 30 days. |
| Solving signed out | A signed random number, set when the site deals a position to somebody with no account, so that it can give you your own work back when you return and hand it over if you make an account. It is not a name, it is not shared with anyone, and it counts nothing against you. 400 days. |
| Google sign-in | Set only when you press the Google button and gone ten minutes later. It exists so that the answer coming back from Google can be matched to the request that left. |
Separately, your browser keeps your theme, sound, symbol-key and hint preferences in its own local storage on your device. Those never reach the server and are cleared with your browsing data.
Sign-in links are stored only as hashes, expire in 15 minutes and work once. Sessions are signed and expiring. There is no password to steal because there is no password.
If this notice changes in a way that affects what happens to data already held, the change is emailed to the address on your account before it takes effect.