This Privacy Policy (the “Privacy Policy”) is designed to inform you as to how Chess Magic Ltd. (“Chess Magic”) handles your Personal Data in connection with your use of our gamified chess web platform and mobile application (collectively, the Platform”), and to notify you about your privacy rights and how the law protects such rights.
This Privacy Policy also describes our practices regarding the collection, use, disclosure and protection of Personal Data relating to children who use the Platform. Where required by applicable law, including the U.S. Children's Online Privacy Protection Act ("COPPA"), we provide additional notice regarding our information practices relating to children and obtain verifiable parental consent before collecting, using or disclosing Personal Data from children under the age of 13.
Chess Magic shall be referred to in this Privacy Policy as the "Company”, “we”, “us” or “our”.
In this Privacy Policy, the term “Personal Data” means any information about an individual from which that person can be identified.
Capitalized terms not otherwise defined under this Privacy Policy shall have the meaning ascribed to them in our Terms of Use.
To the extent that the European General Data Protection Regulation (“GDPR”) or the United Kingdom General Data Protection Regulation (“UK GDPR”) apply to Personal Data that we process in accordance with this Privacy Policy, we act as act as a “data controller” with respect to such processing. To the extent that the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CCPA”) applies, we act as a “business”.
We encourage you to read this Privacy Policy carefully and to regularly check this page to review any changes we might make to the terms of this Privacy Policy. This Privacy Policy supplements other policies we may provide as part of our interactions with you or policies you may have received from other controllers and is not intended to override such policies.
This Privacy Policy is provided in a layered format so you can click through to the specific areas set out below.
If you are a resident of one of the U.S. states listed below, please read the additional information for U.S. residents.
1. The Data We Collect About You
When teachers, students, parents, and authorized school administrators or other school personnel (collectively, “Users”) use the Platform or contact us through it, we collect the categories of Personal Data described below, depending on the User type and the services used.
Personal Data we collect on all Users:
Identity Data including first and last name.
Contact Data including email address, and with respect to teachers and parents also telephone number.
Usage Data including information about use or interaction with our Platform (such as the date and time of access, duration of use, and pages viewed).
Technical Data including information about the internet connection (such as IP address and internet service provider name), the device and software used to access the Platform (e.g., web browser type and computer operating system).
Personal Data we collect on Students:
Education Data including age, school grade or class, and the school attended.
Personal Data we collect on Teachers:
Professional Data including title and school where the teacher is employed.
Marketing Data, for adult Users only, such as preferences regarding marketing communications or information concerning use of our services, where applicable.
Additional Inquiry Data includes additional information that Users may provide when contacting us through the Platform or when signing up for any of our services.
Personal Data we collect on Parents:
Payment Data, where direct family purchases are offered, may include payment instrument details. Payment Data is processed by our payment processing vendors and is not stored by the Company.
Address Data, where required for billing or payment processing, may include country/region, state/county, town/city, street address, zip code and other billing details.
Marketing Data
Additional Inquiry Data
We also collect, use and share aggregated data such as statistical data for any purpose. Such information does not reveal your identity and therefore is not considered Personal Data. For example, we may aggregate your Usage Data to calculate the percentage of Users accessing a specific feature available through the Platform.
Protecting the Privacy Rights of Third Parties
If you provide us any Personal Data relating to others, you must make sure that you have permission to do so.
2. How We Collect Your Personal Data
We use different methods to collect data from and about you including through:
Direct interactions. When you register to use the Platform, contact us through our Platform, or otherwise provide your Personal Data directly to us, you will be asked to provide us with your Identity Data, Contact Data, Professional Data, Payment Data and Address Data so that we can provide our services to you, respond to your questions or requests or otherwise contact you. You may also provide Additional Inquiry Data in such instances.
Automated technologies or interactions. As you interact with our Platform, we automatically collect the applicable Technical Data and Usage Data. We collect this data by using cookies, server logs, web beacons and other similar technologies.
Third parties or publicly available sources. We may receive Technical Data and Usage Data about you from third parties, such as the Usage Data and Technical Data that we receive from analytics providers.
You are not legally obligated to provide any Personal Data to us. Any Personal Data that you choose to provide to us, is provided at your own free will. However, it is possible that without providing certain data, we may not be able to provide you with certain services available through the Platform, or to respond to your inquiries. By using the Platform or contacting us, you express your consent to this Privacy Policy and to the collection of Personal Data about you as detailed in this Privacy Policy.
We will only use your Personal Data when permitted by law. We will commonly use your Personal Data in the following circumstances:
Where the processing is necessary in connection with the performance of any contract we have entered into with you or where it is necessary for taking steps at your request prior to entering a contract.
Where the processing is necessary for our legitimate interests (or those of a third party), and such legitimate interests are not overridden by your interests, fundamental rights, or freedoms. Legitimate interest means our interest in managing and conducting our business.
Where the processing is necessary for compliance with a legal or regulatory obligation.
Where you have provided your consent for such processing. Such consent can be revoked at any time.
Purposes for Which We Use Your Personal Data
Below is a description of the ways we use your Personal Data. The categories of Personal Data listed below apply to the relevant Users as described in Section 1 above. To the extent that the GDPR and UK GDPR apply, we have mentioned the legal bases we rely on to use your Personal Data, and identified what our legitimate interests are where appropriate:Section 1
| Purpose/Activity | User Category | Type of data (as applicable) |
Lawful basis for processing including basis of legitimate interest |
|---|---|---|---|
| Provision of services via the Platform (including registration to the Platform) | Students |
|
|
| Teachers |
|
||
| Parents |
|
||
|
Students |
|
|
| Teachers |
|
||
| Parents |
|
||
|
Teachers |
|
|
| Parents | |||
| To improve our Platform, products/services, marketing, customer relationships and experiences, including by personalizing and customizing our content | All categories |
|
|
| To administer and protect our business and this Platform (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | All categories |
|
|
|
Parents |
|
|
| In the event of a legal dispute between you (and/or a party on your behalf) to us (and/or a party on our behalf), we may use your data to the extent necessary in connection with handling such dispute. | All categories |
|
Necessary for our legitimate interests (to defend and enforce our legal rights). |
|
|
|
|
Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data.
Promotional Offers
Adult Users may receive marketing communications from us where they have requested information, opted in, or where otherwise permitted by applicable law. We do not use student Personal Data for direct marketing communications.
You can change your contact preferences at any time by using the unsubscribe or opt-out link in a marketing message, where available, or by contacting us at [email protected].contacting us
Cookies and Other Tracking Technologies
We may use cookies, device identifiers, server logs, software development kits (SDKs), and similar technologies to provide Platform functionality, maintain security, remember preferences, and understand how the Platform is used. Where required by applicable law, non-essential cookies or similar technologies will be used only after obtaining the required consent.
A cookie is a small piece of data or a text file that is downloaded to your computer or mobile device when you access certain websites. Cookies may contain text that can be read by the web server that delivered the cookie to you. The text contained in the cookie generally consists of a sequence of letters and numbers that uniquely identifies your computer or mobile device; it may contain other information as well. We and third parties we partner with may store, and access some or all the cookies described below on your device.
Types of cookies and similar technologies may include:
Strictly Necessary Cookies. These cookies are necessary for proper functioning of the Platform, such as displaying content, logging in, validating your session, responding to your request for services, and other functions.
Performance Cookies. These cookies collect information about the use of the Platform, such as pages visited, traffic sources, Users’ interests, content management, and other Platform measurements.
Functional Cookies. These cookies enable the Platform to remember a User’s choices – such as their language, username, and other personal choices – while using the Platform. They can also be used to deliver services, such as letting a User make a blog post, listen to audio, or watch videos on the Platform.
Media Cookies. These cookies can be used to improve the Platform’s performance and provide special features and content. They can be placed by third parties who provide services to us or by our Company.
Session Cookies. These cookies allow websites to link the actions of a User during a browser session. Session cookies permit Users to be recognized as they navigate a website so that any item or page changes they make are remembered from page to page. Session cookies expire after a browser session; thus, they are not stored long term.
Persistent Cookies. These cookies may remain on a User’s device between browser sessions so that preferences or actions can be remembered when the User returns to the Platform.
Most web browsers can be set to disable the use of cookies. However, if you disable cookies, you may not be able to access features on our Platform correctly or at all. Further details on how to disable cookies in different web browsers can be found here:
Internet Explorer: http://windows.microsoft.com/en-GB/internet-explorer/delete-manage-cookies
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer#w_cookie-settings
Safari: http://help.apple.com/safari/mac/8.0/#/sfri11471
Microsoft Edge: https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Opera: https://help.opera.com/en/latest/web-preferences/Among others, our Platform use the following tracking and analytics services:
https://www.google.com/policies/privacy/partners/https://tools.google.com/dlpage/gaoptout
https://mixpanel.com/terms/https://mixpanel.com/privacyhttps://mixpanel.com/optout/
https://www.facebook.com/legal/technology_terms/http://www.aboutads.info/choices
Where used, web beacons or similar technologies may help us understand whether communications are opened and how Users interact with the Platform. We use such technologies only as permitted by applicable law.
Third-party service providers may use cookies or similar technologies on our behalf to provide services such as hosting, security, support, or analytics, subject to applicable law and our agreements with those providers.
Third-Party Links
The Platform may include links to third-party websites, plug-ins and applications. Clicking on those links or interacting with such content may allow your data to be shared with the relevant third-party. We do not control these third-party websites and are not responsible for their privacy statements; we therefore recommend that you read the privacy policy of every websites you visit.
4. Sharing Your Personal Data with Third Parties
We share Personal Data with third party service providers that provide us services in connection with the purposes listed above.
For example, we may share your applicable Identity Data, Contact Data, Usage Data and Technical Data with web analytics providers, email and marketing service providers and other vendors that assist us in maintaining the Platform (including hosting services). For additional information, please see the description above in the section titled Cookies and Other Tracking Technologies.
We may share you Identity Data, Contact Data, Payment Data and Address Data process payments made through the Platform.
We may also share your Personal Data with legal and regulatory authorities to the extent required by applicable law; our professional advisors (e.g. lawyers, accountants) to the extent necessary for the provision of their services to us; and third parties in connection with business transactions such as the sale, transfer, investment in, or merger of our business or assets (or parts thereof), provided such parties assume the obligations of our Privacy Policy; and potential purchasers or investors during the evaluation of such transactions.
5. Children’s Privacy
Our Platform is directed, in part, to children, including children under the age of 13 who use our Platform as students.
We may collect certain categories of Personal Data from or about children, including Identity Data, Contact Data, Education Data, Technical Data and Usage Data. Depending on how the Platform is used, this may include a child’s first and last name, email address or username, age, school grade or class, school attended, and technical identifiers such as an IP address, cookie identifier, or device identifier. A more detailed description of the categories of Personal Data we collect appears in Section 1 above.Section 1
We may collect this information directly from children, parents or legal guardians, schools or authorized school personnel, in connection with registration, account creation, communications with us, or use of the Platform. We may also collect certain information automatically through cookies, SDKs, server logs and similar technologies, as described in Section 2 above.Section 2
We use children’s Personal Data to provide, maintain and improve the services via the Platform, administer accounts, respond to your requests or questions, maintain the security and integrity of the Platform, comply with legal obligations, and protect or enforce our rights. A more detailed description of how we use Personal Data is set forth in Section 3 above.
We may disclose children’s Personal Data to third-party service providers that support the operation and maintenance of the Platform, including hosting, customer support, security and, where applicable, analytics providers, as well as to legal and regulatory authorities and professional advisors as permitted by law. A current list of relevant service providers that process children’s Personal Data is available upon request by contacting us at [email protected].Section 4
Where required by COPPA, we will provide direct notice to a parent or legal guardian and obtain verifiable parental consent before collecting, using or disclosing Personal Data from a child under the age of 13, except where an exception under applicable law applies. Where permitted by COPPA, a school may provide authorization on behalf of parents for the collection and use of student information for an educational purpose.
We will not condition a child’s participation in any activity on the child providing more Personal Data than is reasonably necessary for such activity.
A parent or legal guardian may, subject to verification of their identity and legal authority, request to review the Personal Data we have collected from their child, request that we delete such Personal Data, and/or refuse to permit our further collection, use or disclosure of the child’s Personal Data. To exercise any of these rights, please contact us using the Contact Details.
Where permitted by applicable law, a parent may consent to our collection and use of their child’s Personal Data without consenting to our disclosure of such information to third parties, unless such disclosure is reasonably necessary in order for us to provide the Platform, carry out a child’s requested activity, protect the security or integrity of the Platform, comply with legal obligations, or otherwise as permitted by law.
Children may also exercise their applicable data protection rights in relation to their Personal Data, subject to applicable law and taking into account their age and capacity. Additional information regarding data subject rights and how to exercise them is provided in Section 9 below.
If we learn that we have collected Personal Data from a child under the age of 13 without the consent or authorization required by applicable law, we will take steps to delete that information as soon as reasonably practicable.
If you are a parent or legal guardian and believe that your child has provided us with Personal Data in violation of applicable law, please contact us promptly so that we can investigate and take appropriate action.
6. International Transfers
We may transfer your Personal Data to countries outside of the
country in which you reside (including
outside of the European Economic Area (EEA) or the United Kingdom (UK)),
that do not necessarily
provide the same level of data protection as the country in which you
reside and are not recognized by
the European Commission and/or UK government as providing an adequate
level of data protection.
Our international transfers of Personal Data are done for the
performance of a contract or implementation
of pre-contractual relations with you, based on your consent, or subject
to safeguards that ensure the
protection of your Personal Data, such as standard contractual clauses
approved by the European
Commission and/or the applicable UK authority (when the transfer is
outside of the EEA or the UK).
7. Data Security
We have put in place security measures intended to protect your Personal Data, including Personal Data relating to children. We maintain administrative, technical and physical safeguards designed to help protect the confidentiality, security and integrity of such information. Unfortunately, we cannot guarantee against the loss or misuse of your Personal Data or secure data transmission over the Internet because of its nature.
8. Data Retention
We retain your Personal Data, including Personal Data relating to children, for as long as necessary to fulfill the purposes we collected it for, including for legal or reporting requirements.
In order to determine the appropriate retention period for Personal Data, we consider the following criteria: the volume, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of Personal Data, the purposes for which we collect and process Personal Data, the timeframe during which we may require such Personal Data in connection with potential litigation, and applicable legal requirements.
9. Your Rights
Certain privacy laws, including the GDPR and UK GDPR, provide Users with rights related to their Personal Data. To the extent that such laws apply to your Personal Data, you may have the following rights:
Request access. This means that you may receive a copy of the Personal Data we hold about you.
Request correction. This means that you may ask us to correct or complete inaccurate or incomplete data that we hold about you.
Request erasure. This means that you may ask us to delete or remove Personal Data that we hold about you. If we are unable to comply with such request, we will notify you of the specific legal reasons for our decision.
Object to processing. This means that you may object to the processing of your Personal Data where it is used for direct marketing purposes, or where we are relying on a legitimate interest and you feel that such interest is overridden by your rights and freedoms.
Request restriction of processing. This means that you may ask us to suspend the processing of your Personal Data if you believe that such data is inaccurate, if our processing is unlawful or if we no longer need to process such data for a particular purpose, but you need us to continue to hold the data.
Data Portability. This means that you may request that we transfer your Personal Data to you or to a third party. This right applies where we have obtained and processed the data from you based on your consent or where we used the information to perform a contract with you.
Withdraw consent at any time. This means that you may withdraw your consent where we are processing your Personal Data based on your consent.
If you wish to exercise any of the rights set out above, please contact us.
What We May Need From You
When you approach us with a request to exercise one of your rights, we may request that you provide us with information needed to confirm your identity as a security measure to ensure that your Personal Data is not disclosed to any person who has no right to receive it.
Time Limit to Respond
We try to respond to all legitimate requests within one month or less, if required by law. Where it takes us more than one month to respond (for example, where your request is particularly complicated or where you have made a number of requests) we will notify you and keep you updated.
10. Accessibility
If you have a disability and would like to access this policy in an alternative format, please contact us via our Contact Details listed below.
11. Contact Details
If you have any questions or concerns, please contact us at:
Email: [email protected]
Postal address: 429 Lenox Ave, 1st Floor, Miami, Florida 33139, USA
You have the right to make a complaint at any time to data protection authorities. We would, however, appreciate the chance to address your concerns before you approach a data protection authority, so please contact us in the first instance.
12. Changes to this Privacy Policy
We reserve the right to change this Privacy Policy at any time. If we do so, we will post an updated version of this Privacy Policy so that our Users are always aware of what information we collect, use, and disclose. Your continued use of our Platform and services after any change to this Privacy Policy will constitute your acceptance of such change.
This version was last updated on September 25, 2026.
Scope of Notice
These disclosures provide additional information about the privacy rights available to individual residents of certain states in the United States and our Personal Data processing practices relating to those individuals.
Nevada Residents
If you are a resident of the state of Nevada in the United States, you have the right to opt out of the sale of your Personal Data. Although we do not currently sell Personal Data of Nevada residents (as defined under Nevada law), you may submit a request to opt-out of the sale of your Personal Data by contacting us as set forth in the Contact Details section below.
Other U.S. Residents
If you are a resident of the state of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia in the United States, the following supplementary disclosures apply to you.
Notice at Collection of Personal Data
Personal Data We Collect, Use and Disclose
We may collect the categories of Personal Data listed in the table below. The table also lists, for each category, the source of the Personal Data, the business purposes for which it will be processed and the third parties to whom it may be disclosed. This section describes our current practices and our practices during the 12 months preceding the “Last Updated” date of this Policy.
|
|
|
|
|---|---|---|---|
| Identifiers, this includes: real name, alias, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. |
Compliance with a legal requirement, including: (a) as required by subpoena, law, or other legal process; (b) necessary to assist law enforcement officials or government enforcement agencies; (c) necessary to investigate violations of or otherwise enforce our terms of use, to maintain security of the Platform and prevent fraudulent or illegal activity; (d) necessary to protect us from legal action or claims from third parties, including you and/or other Users; or (e) necessary to protect the legal rights, personal/real property, or personal safety of our Company, Users, employees, and affiliates (“Compliance with Legal Requirements”). |
|
|
| Personal Data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, address, telephone number, education, employment, bank account number, credit card number, debit card number, or any other financial information). |
|
|
|
| Commercial information, including records of personal property, services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies (Parents only). |
|
|
|
| Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement. |
|
|
|
| Inferences drawn from other Personal Data to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
|
|
|
| Sensitive Personal Data (such as account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; |
|
|
|
If you provide us any Personal Data relating to others, you must make sure that you have permission to do so.
Sale, Sharing, and Disclosure of Personal Data
We do not sell Personal Data or share it with third parties for cross-context behavioral or targeted advertising, and have not done so in the past 12 months.
We do not knowingly sell Personal Data of minors or share it with third parties for cross-context behavioral or targeted advertising.
Deidentified Information
We may at times receive, or process Personal Data to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.
Data Retention
We retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for legal or reporting requirements.
In order to determine the appropriate retention period for Personal Data, we consider the following criteria: the volume, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of Personal Data, the purposes for which we collect and process Personal Data, the timeframe during which we may require such Personal Data in connection with potential litigation, and applicable legal requirements.
Your U.S. Privacy Rights
Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:
Right to Know and to Access: the right to confirm whether we are processing Personal Data about you, to obtain access to the specific pieces of Personal Data we have collected about you, and to request certain information regarding our collection and use of Personal Data, and disclosure of Personal Data to third parties.
Right to Deletion or Correction: the right to request that we delete the Personal Data that we collected from you or that we correct inaccurate Personal Data we maintain.
Non-discrimination: you have a right not to receive discriminatory treatment by us for the exercise of such privacy rights as conferred by applicable law. Unless permitted by applicable law, we will not: deny you goods or services, provide you a different level or quality of goods or services or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. However, limiting the use of your Personal Data may affect features and uses that rely on that data.
Automated decision-making: you will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have notified you and allowed you to opt-out.
Opt-out of Selling or Sharing: the right to opt-out of the sale of Personal Data or the sharing of Personal Data for targeted advertising purposes.
Right to Control Over Sensitive Personal Data: the right to exercise control over our collection and processing of sensitive Personal Data.
Submitting Requests regarding Your Rights
To make a request regarding your rights as detailed above, please submit a request using one of the methods in the Contact Details section below.
Before processing your request to exercise certain rights (including the Right to Know and to Access, and the Right to Deletion or Correction), we will need to verify your identity and confirm your state of residency. In order to verify your identity, we will generally ask you to provide us with your credentials. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or where you are not a resident of a state where these rights are available.
You may use a legally authorized person to submit a request on your behalf, if you provide a signed written permission to such person. Depending on the evidence we receive from your authorized person, we may still need to separately reach out to you to confirm the authorized person has permission to act on your behalf and to verify your identity in connection with the request.
Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by replying to the communication resolving your original request.
Accessibility
If you have a disability and would like to access this policy in an alternative format, please contact us via our Contact Details listed below.
Contact Details
If you have any questions about these additional disclosures, or if you would like to exercise one of your privacy rights, please contact us at:
Email: [email protected]
Postal address: 429 Lenox Ave, 1st Floor, Miami, Florida 33139, USA
Changes to this Privacy Policy
We reserve the right to change this document at any time. If we do so, we will post an updated version of this document so that our Users are always aware of what information we collect, use, and disclose. Your continued use of our Platform and services after any change to this document will constitute your acceptance of such change.
This version was last updated on September 25, 2026.