Privacy at TargetChess
TargetChess uses only the information needed to provide your workspace, imports, chess analysis, and product support.
Information we process
When you choose Continue with Lichess, Lichess sends us your stable account identifier, username, and email address after you approve the request. We use the identifier—not your email—as the key for your TargetChess workspace. We never receive your Lichess password. When you connect Chess.com or Lichess, we fetch public games for the username you provide. PGN files are processed only when you upload them.
Sign-in and session security
The Lichess access token is used once to read your identity and is then revoked rather than stored. TargetChess creates its own random sign-in cookie, stores only a one-way hash of that token in its database, and marks the cookie Secure, HttpOnly, and SameSite. Sessions expire after seven days without activity and after 30 days in all cases.
How your data is used
We store your connected usernames, normalized game library, recent import snapshots, saved review summaries, game favorites, tags, notes, saved library views, weekly plans, training cards, practice attempts, and Coach reassessment checkpoints so your workspace persists between visits. We do not sell personal information or use game data for advertising.
Local engine analysis
Stockfish evaluates positions inside your browser rather than through a third-party analysis service. When you finish a review, TargetChess saves its compact score and critical-move summary to your account so you can reopen it later.
Feedback and product diagnostics
When you use the in-product feedback form, we store the category, message, TargetChess page, product area, and whether you used the compact or wide layout. We also record coarse first-party page-view and error diagnostics to understand feature use and reliability. These diagnostics do not include your game moves or general browser history, and they are not shared with advertising networks.
Third-party services
Public game imports contact Chess.com or Lichess. Sign-in redirects you to Lichess for authorization. Their privacy terms apply to data they serve and process. Cloudflare hosts the standalone application and processes technical request data needed to deliver and secure it.
Automatic refresh
A private scheduled updater checks connected public Chess.com and Lichess accounts every six hours, including while the dashboard is closed, and skips accounts refreshed within that interval. Opening or returning to the signed-in dashboard can also refresh stale accounts. Uploaded PGN files are never refreshed automatically.
Retention and choices
Use the account controls in your dashboard to permanently delete your personal profile, sign-in sessions, saved identity record, game library, imports, favorites, tags, notes, saved views, weekly plans, training cards and attempts, Coach checkpoints, submitted feedback, product diagnostics, and saved reviews. We retain only a scrubbed deletion marker keyed to the stable account identifier so an open tab or unfinished request cannot recreate deleted data. If you later sign in again, Lichess supplies your identity again, but TargetChess keeps the workspace deleted until you explicitly create a fresh one. You may also request access or correction by emailing hello@targetchess.com.
Changes
We may update this notice as the product changes. The effective date above identifies the current version.