Privacy Policy

Shortcastle Pte. Ltd. ("the Company", "we", "us", or "our") operates ChessMethod — the website at https://chessmethod.io and the ChessMethod iOS and Android apps (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices available to you.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Information we collect

We may collect the following types of information:

• Account and profile data — name, email address, username, hashed password, role (learner, coach/trainer, or admin), profile photo (required for learner certification identity), billing and subscription status, and coach promo codes you redeem.
• Sign-in — email or username and a password, or Chesslang One. We do not offer Google or Facebook login. If you use Chesslang One, that service sends us a profile (such as member id, email, and membership status) so we can create or link your ChessMethod account. Chesslang One has its own privacy policy.
• Device and usage data — IP address, browser type, device type, operating system, pages or screens you visit, app version, and diagnostic information needed to operate and secure the Service.
• Payment data — paid access is processed by Stripe. We receive payment status and related account identifiers. We do not store your full card number. Stripe's privacy policy applies to payment details you give Stripe.
• Forums and other user content — posts and your display name can be seen by other users.
• Certificates — if you pass a certification exam, we issue a certificate with a public verification code. Anyone with the link can view details such as name, phase, result, date, and certificate code without logging in. A revoked certificate still resolves at its URL and is shown as revoked.
• Certification exams, camera, and microphone — learner exams are webcam-proctored for identity verification and exam integrity, not advertising. No camera access happens until you reach the exam consent screen, see a live preview, and explicitly agree. During an exam we may take periodic webcam snapshots, log events such as camera start/stop, you leaving the tab, and exam submit, and may record the session as video stored with Amazon S3 (configured to expire after 180 days). If video recording is not configured, the exam still runs and no video is stored. Snapshots and exam-event records are stored in ChessMethod's database until deleted as part of account deletion or another manual process; they do not currently expire automatically. Only ChessMethod admin accounts can review this material. We do not sell exam photos or recordings or use them for advertising.
• Curriculum content is read from the ChessLang curriculum service. Exam answers, scores, proctoring data, and certificates are ChessMethod's own records. Proctoring media is not sent to the ChessLang curriculum API.

How we use information

We use the information we collect to:

• Provide and maintain the Service (accounts, curriculum, forums, certification)
• Manage your account and the features available to your role
• Perform a contract with you, including subscriptions and exam purchases
• Run webcam-proctored exams and review them for integrity
• Issue and display verifiable certificates
• Process payments through Stripe
• Contact you about the Service (for example security or account messages) and handle your requests
• Detect, prevent, and investigate fraud, abuse, or security issues, and improve the Service

We do not use exam camera data to send marketing.

Sharing

We may share personal data:

• With service providers who host the Service, store files (including exam video), send email, or process payments (including Stripe and Amazon Web Services), only as needed to operate ChessMethod
• With Chesslang One, if you choose that sign-in
• Publicly, when you publish forum posts or when a certificate is verified at its public URL
• With ChessMethod admins, for support and exam review
• If required by law, to protect the Company, users, or the public, or for a business transfer such as a merger or sale of assets
• With your consent

We do not sell your personal data.

Cookies and local storage

The Service uses cookies and browser local storage to keep you signed in, remember preferences such as theme and language, and protect against unauthorized access. You can control cookies through your browser settings, but disabling them may affect how the Service works.

Children's privacy

ChessMethod is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have, contact us and we will delete it. Webcam exams are intended for users who can consent themselves, or whose parent or guardian consents where the law requires it.

Data retention

We keep account data while your account is active and as needed for legal, dispute, and security purposes. Exam video is set to expire after 180 days. Exam snapshots and related event records are kept until deleted. Public certificate pages remain available so a code can still be checked, including if a certificate was revoked.

Security

We use commercially reasonable measures to protect personal data, including encrypted connections (HTTPS), secure authentication, and access controls. No method of transmission or storage is 100% secure.

Your rights

Depending on where you live, you may have the right to access, correct, or delete personal data we hold about you, subject to legal and operational requirements.

Delete my account

Email support@chessmethod.io with the subject DELETE MY ACCOUNT. Include the email address and username on the account. We will process requests as soon as reasonably possible, and delete or de-identify account data we control, including profile photo and exam snapshots we still hold. Exam video may already have expired under the 180-day storage rule. We may retain limited records if the law requires it (for example payment records). A public certificate URL may still resolve as revoked or as a record that a credential was issued, without keeping your login. There is no in-app delete button today; email is the supported path.

Contact

Privacy questions and deletion requests: support@chessmethod.io. Shortcastle Pte. Ltd., ChessMethod, https://chessmethod.io.