C&C Chess Club
← Back to the start page

Privacy policy – C&C Chess Club

As of 27 August 2026
Controller: Andreas Amon, amonandi@hotmail.com

This is a translation for convenience. The German version is the authoritative one; where the two differ, the German text applies.

This app is a private chess app for the club SV Nußdorf-Debant. It consists of two parts, and the difference matters.

Without an account, games, analysis, training, puzzles and statistics work in full. Everything for that stays on your device.

With an account the club features are added: member list, shared fixtures, links, club crest and chat. For those I run my own server. You decide for yourself whether to sign in.

1. What stays on your device

In the app's private storage, without being transmitted anywhere: your chess games, training areas and repertoire progress; your local profile with player name, Elo rating, club, guest club, profile picture, Lichess username, Lichess API token and Chesstempo username; your ideas including attached screenshots; settings such as language, font size and board colours.

There is no analysis of your usage behaviour, no advertising and no tracking.

Automatic cloud backup is deliberately switched off, so that in particular the Lichess token does not end up in a Google backup. Under "Options → Back up data" you can create a backup file yourself. Your sign-in token for the club server is intentionally not included in this backup – otherwise whoever gets hold of the file could impersonate you.

2. The club account and the club server

Signing in works via Google Sign-In. The app receives a signed proof from Google and sends it to my server, which verifies it with Google. Neither the app nor the server ever sees your Google password.

Stored on the server: your Google identifier and your e-mail address (to recognise the account); your display name and the address of your Google profile picture (for display in the member list and chat); the time of your last activity (for the green online dot); your club membership and your role; your FIDE ID, if you enter one, together with the ratings fetched with it; your chat messages, direct messages, shared positions and uploaded images; which chat room you last opened (for the "here right now" indicator; the entry expires by itself after 30 seconds); which club puzzles you marked as solved; the moves, times and results of the games you play in the app against club members; and the club fixtures, links and club crest entered by the club committee.

Not on the server: your games against the computer, your analyses, your training progress, your Lichess token, your Chesstempo account and your ideas.

Club content is visible only to members of the same club. Anyone who belongs to no club or has left it has no access. Other members see of you: display name, profile picture, the Elo rating you entered yourself, the official ratings fetched via your FIDE ID, role and whether you are online right now – not your e-mail address. While you have a chat room open they also see that you are in that room; after you leave that disappears by itself within half a minute.

Direct messages

You can write personally to individual members of your club (member list → speech bubble). Such a conversation is visible exclusively to the two of you – even the club committee can neither read nor delete it; the server checks on every access whether you belong to this conversation. The same details are stored as in the club chat: text, shared positions, images and the time. If you do not want to be contacted, switch it off under "Options → Direct messages"; conversations already started are not affected. If either of the two accounts disappears, the whole conversation including its content is deleted.

Ranking

Games you play in the app against a club member produce a record of wins, draws and losses that all members of your club see in the ranking. In your profile you can object at any time under "Show in ranking" – you then no longer appear there and can still keep playing.

Bughouse

At the bughouse table four members play on two connected boards. The other three see your name, your board, your clock and the pieces you can drop – that is the point of the game. Moves, times and result are stored like for any other game; bughouse games do not count in the ranking. Calls to your partner are fixed phrases ("Need a bishop", "Hold the queen"); there is no free text there, and a call disappears by itself after 25 seconds.

Analysis room

The analysis room is a shared board for the whole club. Position, moves and the name of the current moderator are visible live to all members – that is the purpose of the room. If you take over moderation, the others see your display name until you hand it back or leave the app; then moderation expires by itself after 45 seconds. The chat of the analysis room is a normal club chat room and follows the same rules as the club chat.

Club puzzles

The club committee can post chess puzzles (position, solution moves, title). All members see these puzzles together with the name of the person who posted them and can solve them in the app. If you mark a puzzle as solved yourself, that is stored on the server; the other members then see how many of them have solved the puzzle ("3 of 9"), but not who in particular. You can withdraw the mark at any time by tapping it again.

Event reminders

If a club event has a time, the server sends all members a notification with the title of the event half an hour beforehand. Anyone who does not want notifications switches them off in the Android settings.

Ratings

In your profile you can enter your FIDE ID. The server remembers this number and uses it to fetch your official ratings: both from the public Austrian Chess Federation club list on chess-results.com (the official FIDE monthly list on ratings.fide.com is only a fallback for players without an Austrian club list; our server currently cannot reach it). For this number the name listed there, the country, the standard, rapid and blitz ratings and the month of the list are stored; the members of your club see the ratings next to your name. All of this comes from publicly accessible federation lists. Without a FIDE ID on file nothing is fetched and nothing is stored. If you remove the number again, the entry is deleted as soon as nobody else has it on file – the same happens when you delete your account.

Tournament tracking

The club can mark players of a running tournament on chess-results.com. The server then regularly checks the public standings of that tournament and sends the club a notification when a new round has been scored. Stored for this are the name as it appears in the tournament list, the tournament and the last seen standing (round, points, rank). These are details from a public tournament list, and they also concern players who do not use this app at all. Anyone who does not want to be tracked contacts the club committee or amonandi@hotmail.com – the entry is then removed.

Notifications

So that you notice new chat and direct messages without having the app open, a push service runs via Firebase Cloud Messaging (Google Ireland Ltd.). Your device receives a random device identifier from Google; my server stores it to match your phone to your account. In the process Google transmits the sender name and the message text to your device — both therefore pass through Google's servers; this also applies to direct messages. Only these two details are passed on: no images, no positions, no contact details. A notification about a direct message goes exclusively to the other person in the conversation, not to the club. You can switch off notifications at any time in the Android settings or under "Options → Notifications"; the app keeps working unchanged. When you sign out, the device identifier is deleted immediately.

The club in the browser

At ccchessclub.eu/app the club features are also available in the browser without the app — for everyone without an Android device. Behind it is the same server, the same account and the same database as in the app; nothing additional is stored because of it. What is stated above in this section applies there unchanged.

Signing in works via Google Sign-In as in the app. For that the sign-in button loads a script from accounts.google.com; Google thereby learns your IP address and that this page was opened. Members' profile pictures are hosted by Google (lh3.googleusercontent.com) and are loaded from there — likewise as in the app.

Scanning a scoresheet in the browser: Whoever uploads a photo of their scoresheet under "Scan" sends this image to the club server — unlike in the Android app, where recognition runs entirely on the device. The photo is processed exclusively to read the moves, not stored and discarded after the reply; it does not leave the server and goes to no third party. Nothing about its content is stored either — neither the recognised moves nor the names written on the scoresheet header. Anyone who would rather not do this at all simply does not use the page; all other club features work independently of it (Art. 6(1)(b) GDPR — performance of the function you requested).

Two cookies are set in the process, both required for operation and neither for observation:

Both are technically necessary (Art. 6(1)(b) and (f) GDPR); no consent banner is needed for them. There is no cookie for recognition across websites and no analysis of visitor behaviour. When you sign out, both cookies are deleted.

Transfer to the USA: Both during sign-in (Google Sign-In) and for notifications (Firebase), data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework; for this framework the European Commission has issued an adequacy decision under Art. 45 GDPR.

The server is hosted by Hetzner Online GmbH in Helsinki, Finland (EU). The connection is encrypted with TLS throughout. A data processing agreement under Art. 28 GDPR with Hetzner has been in place since 31 August 2026; it obliges Hetzner to carry out the processing exclusively in the EU or the EEA. The data remains stored as long as your account exists; sign-in sessions expire after 180 days.

Like every web server it logs accesses: IP address, time, requested address and status code. This serves troubleshooting and defence against abuse (Art. 6(1)(f) GDPR). These logs are deleted automatically after at most 14 days.

A backup of the database is made once a day. It remains on the same server and is deleted automatically after 14 days. At most 14 days after a deletion the data has therefore also disappeared from all backups.

3. Deleting your account

In the app under "Me → My profile → Delete account". Deleted immediately and permanently: your name, your e-mail address, your profile picture address, your club membership, your FIDE ID together with the ratings fetched with it, all messages and images you posted in the chat, your direct conversations together with everything in them, and running games and open challenges. Finished games against club members are kept, because a game always belongs to two people — your name is permanently replaced there by "Deleted account", and the FIDE ID is removed as well – it is no longer possible to trace the game back to you. If you are the last member of your club, the club is deleted together with its fixtures, links and crest.

Your games and training data remain unaffected on the device – they need no account. You can also request deletion by e-mail to amonandi@hotmail.com. All of this is set out in detail on the page Delete account.

4. When else data leaves the device

Only when you use a feature that needs an internet connection:

Daily puzzle, chess news and opening database call lichess.org; for the opening database your Lichess API token is sent along for authentication. Importing games from Lichess transmits your Lichess username. Chess news also comes from de.chessbase.com or chess.com, fixture import from chess-results.com and the club news from schach.nussdorf-debant.at – no personal data of yours is transmitted in the process. When you open your Chesstempo profile, your Chesstempo username is part of the address.

Feedback goes to a Google spreadsheet of the developer: your text, the attached screenshot, app version, device model and your sender name.

These services' own privacy policies apply to them.

5. Feedback

Sending feedback is voluntary and only happens when you explicitly tap "Send" in the ideas list. Beforehand the app shows you what will be transmitted. Your games, your credentials and your chat messages are not sent along. The feedback is used exclusively to improve the app and is not passed on. On request I delete the feedback you submitted.

6. Legal bases

Club features: Art. 6(1)(b) GDPR, performance of the usage relationship you enter into by signing in. Without this data no club area can be shown.

Feedback, improving scan recognition and updating your ratings via the FIDE ID: Art. 6(1)(a) GDPR, your consent, revocable at any time – you give it by sending feedback, flipping the donation switch or entering your FIDE ID.

Tournament tracking: Art. 6(1)(f) GDPR, legitimate interest of the club in following the results of its members and opponents from public tournament lists. Objection at any time to amonandi@hotmail.com.

7. Permissions

The app requires internet access and reading the network state. For camera and file selection the system dialogs are used; the app itself needs no permanent permission for them.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact amonandi@hotmail.com. You can also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

9. Children

The app is aimed at chess players of all ages. The club chat allows communication between members of the same club; joining is only possible with the join code that the club committee hands out. Since August 2026 members can also write to each other personally (direct messages). Anyone who does not want that – for themselves or for a child – switches it off under "Options → Direct messages"; after that nobody can start a new conversation. There is no advertising and no passing on of data to third parties for advertising purposes.

Improving scan recognition (voluntary)

The app can turn photographed scoresheets into moves. Recognition itself runs entirely on your device; nothing is transmitted in the process.

If you explicitly allow it (switch "Improve scoresheet scanner" under Options → Scoresheet scanner, off by default), the app transmits the scoresheet photo and the moves you confirmed to our server after you accept a scan. The photo shows the whole sheet – including the header, where names, date, tournament or ratings may be written. The transfer has no link to your account: image and move text are stored, not who sent them. They serve exclusively to improve handwriting recognition for all clubs and are not passed on.

Please only donate scoresheets whose transfer to me your opponent agrees with too – the sheet usually also carries their name.

You can revoke the permission at any time in the options; after that nothing more is transmitted. Recordings already donated I delete on request to amonandi@hotmail.com.