Privacy, GDPR, and account deletion
Privacy, GDPR, and account deletion
We store the minimum data needed to run TacoChess and we let you take it with you or delete it.
What we store
- Your email + display name (in Clerk; we never see your password)
- Your imported games (PGN) and computed analyses (Chess DNA, Game Review annotations)
- Your TacoChess rating history
- Aggregate signal data for Fair Play (anti-cheating) — see our Fair Play page for the full list
What we do NOT store
- Your password
- Your payment card details (those are at Stripe)
- The contents of your support conversations beyond 12 months from last activity
Export your data (GDPR Art. 20)
Account → Privacy → Download my data. We email you a JSON archive within 30 days (usually faster).
Delete your account (GDPR Art. 17)
Account → Privacy → Delete account. This:
1. Anonymises your games to a deleted-user placeholder (so opponents' rating histories stay intact)
2. Deletes your Chess DNA, support conversations, and personal data
3. Cancels any active Pro subscription
There is a 7-day grace period — you can re-activate by signing in within that window.