Chess Career / SchachPortal
Privacy policy
Updated 21 September 2026
Who is responsible?
This policy covers Chess Career (chesscareer.com), SchachPortal (schachportal.com), and their connected iOS app, including Google sign-in under “Chess Career / SchachPortal”. The controller is Voxoro AI UG (haftungsbeschränkt), Am Reitplatz 32, 14624 Dallgow-Döberitz, Germany. Contact: contact@voxoroai.com. See our company information.
Accounts and Google sign-in
Google provides an account identifier, verified email address, name and, where available, profile picture. We verify the sign-in token and store account, access-role and session information to authenticate you and protect your data. This sign-in does not grant access to your Gmail, Drive or Calendar contents. The two services maintain separate account and data stores; the iOS app signs into each service. Account data is needed for signed-in features; public SchachPortal pages can be viewed without an account.
Chess Career data
We process games and PGN metadata (which can name other players), moves, results, tournaments, ratings, saved reviews, learning progress, practice history, notes and preferences you use or save. Browser play and analysis can be processed on our server. The iOS app also keeps local caches and queued changes and uses on-device chess engines. Local processing does not mean that saved or synchronized account data stays only on your device. A review you choose to share through a public link is accessible to anyone with that link.
SchachPortal, families and registration
We process tournament selections, registration/payment status, attendance, results, notes, family membership and invitations, managed-player profiles and travel preferences such as your postal code. Family members share the family tracker; the family manager manages membership and player profiles. Tournament registration may include contact details, birth date, club/rating data, guardian details and consent, and optional accessibility requests. Authorized organizers receive registration information to run the event. Public participant details, pairings and results depend on the event and publication choices. Reports and support requests include the text and contact details you provide so we can investigate and respond. Avoid including unnecessary sensitive information. Public tournament and, where enabled, club/player directory information also comes from organizers, federation publications and linked public sources.
Optional AI and photos
When you request AI coaching, recognition or tournament chat, relevant game/position text, your question and supplied conversation context, or selected scoresheet photos are sent through our backend to Google Gemini. Photos can contain names and other handwriting: crop unnecessary details before sending. Photo bytes are processed transiently and are not included in saved games or reviews; recognized moves and saved analysis can remain in your account. SchachPortal chat requires external-AI consent, uses published tournament context and does not add private account/family/tracker data to its prompt. Current chat content is not saved in SchachPortal’s conversation log; historical logs may still exist. Google’s processing and temporary safety retention remain separate; see the Gemini terms. Do not assume that an AI request is anonymous or that the provider retains nothing.
Cookies, usage and external services
Both sites use browser storage for preferences and authentication/session protection. SchachPortal additionally sets a visitor identifier cookie for up to one year and records visit/chat timestamps, identifiers and routes for usage statistics. Its current website loads Google Analytics on page load; this can transmit page/activity and browser/device information to Google and use analytics cookies. This policy does not represent a consent choice or claim that analytics waits for consent. Browser cookie controls can limit storage. Google sign-in loads Google resources. Opening or playing YouTube content, or following Maps, calendar, organizer or sharing links, involves the respective provider and its privacy policy. See Google Privacy and Analytics data handling.
Hosting, operations and recipients
The services run on Google Cloud infrastructure in the United States. Servers and security controls process connection/request information such as IP address, time, route, browser details and errors. Authorized administrators can access data needed for support, moderation and operations. Operational alerts are sent to Slack: Chess Career login alerts include email, IP, client and account/access status; SchachPortal auth and activity alerts can include display name, email, account ID, IP, route, time and a coarse action description. Private tracker notes and AI chat text are not included in these alerts. SchachPortal also keeps private administrator activity history and tournament-status summaries. In iOS, credentials are kept in Keychain; optional notifications use Apple Push Notification service, device tokens and notification preferences. Camera/photo access is used for captures you select. Providers may process data outside the EEA. Google’s Cloud data-processing terms describe transfer safeguards; contact us for information about the safeguards applicable to your data. See also Slack Privacy and Apple Privacy.
Purposes and legal grounds
Account access, saved chess features and requested planning/registration services use Article 6(1)(b) GDPR where needed to provide the service. Security, abuse prevention, support and operational administration rely on legitimate interests under Article 6(1)(f), subject to your rights and interests. Where we request consent, including external-AI consent or optional publication, Article 6(1)(a) applies; you can withdraw it for future processing. Legal obligations may require processing under Article 6(1)(c). Non-essential analytics/device storage requires consent where applicable; the current analytics behavior is disclosed above. Optional accessibility information can reveal health data: provide only what is needed and contact the organizer about handling it. Family tools can contain children’s data; parents/guardians should manage submissions and permissions. This notice is not an age-verification mechanism.
Storage and deletion
Saved account, chess, family, registration and operational records do not all have an automatic expiry. Retention depends on continued use, the purpose of the record, your deletion request, event administration, security investigations and applicable legal obligations. Historical logs and backups may remain after deletion from an active interface; removing a local cache, logging out or revoking Google access does not itself delete server records. Use available item-deletion controls or contact us for account/data deletion and the retention details for your records. We do not promise a fixed deletion or backup-erasure period that the systems do not enforce.
Your rights and contact
Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Email contact@voxoroai.com and identify the service and account concerned; we may need proportionate identity verification. You may complain to a supervisory authority, including the Brandenburg data protection authority. Chess ratings and AI suggestions support chess activities; they are not decisions intended to have legal or similarly significant effects. We update this notice when relevant processing changes.