Privacy, GDPR, and account deletion

We store the minimum data needed to run TacoChess and we let you take it with you or delete it.

What we store

• Your email + display name (in Clerk; we never see your password)
• Your imported games (PGN) and computed analyses (Chess DNA, Game Review annotations)
• Your TacoChess rating history
• Aggregate signal data for Fair Play (anti-cheating) — see our Fair Play page for the full list

What we do NOT store

• Your password
• Your payment card details (those are at Stripe)
• The contents of your support conversations beyond 12 months from last activity

Export your data (GDPR Art. 20)

Account → Privacy → Download my data. We email you a JSON archive within 30 days (usually faster).

Delete your account (GDPR Art. 17)

Account → Privacy → Delete account. This:

1. Anonymises your games to a deleted-user placeholder (so opponents' rating histories stay intact)
2. Deletes your Chess DNA, support conversations, and personal data
3. Cancels any active Pro subscription

There is a 7-day grace period — you can re-activate by signing in within that window.