Privacy policy
Mid-Game is a chess game for the web and Android. It stores the minimum needed to keep your rating and games: a username, your chess results, and — only if you choose to sign in with Google — the identifier Google gives us for your account. There are no advertisements, no analytics or tracking libraries, and your data is never sold.
Effective 5 September 2026. This policy covers the website, the game served from it, and the Android app (package com.midgame.chess).
| If you… | We store |
|---|---|
| Play as a guest | Nothing on our server. Your display name, rating, recent games and preferences stay in your own browser's storage (or the app's storage on Android). While you are in an online match or the lobby chat, other players see the name and rating you chose. |
| Register with a password | Your username and a salted hash of your password (the password itself is never stored). |
| Sign in with Google | Your username (which you pick), the stable account identifier Google assigns to you, and the e-mail address Google reports. We use these only to recognise you on later sign-ins. We ask Google for basic profile information only, and we never see your Google password. |
| Play rated games on an account | Your rating and its history, win/draw/loss counts per game length, your last 25 games plus any you choose to save, and the profile sigil you pick. |
| Add friends | The usernames of your friends and any open friend requests. |
| Use the chat | Lobby messages are kept on the server for 30 minutes so people who join can see the recent conversation, then deleted. Messages during a game are relayed to your opponent and not kept. |
Like any online service, our server and the network providers that carry the connection (such as Cloudflare) process your device's IP address and connection details in order to deliver the game. We do not store IP addresses in account data. A sign-in token is kept in your browser or app so you stay signed in; it is removed when you log out.
The chess engine runs on your own device. Your moves in a bot game are not sent anywhere; the result of a rated bot game is reported to the server to update your rating.
No advertising networks, no analytics or crash-reporting services, and no data brokers. We do not sell or rent personal data.
The app asks for internet access only. It stores the same data on your device as the website stores in your browser, and it talks to the same server. Uninstalling the app removes the data held on the device.
Mid-Game is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will remove it.
Passwords are hashed with scrypt and never stored in the clear. Connections to the website use HTTPS. No system is perfectly secure, so we keep the amount of data we hold as small as we can.
If this policy changes, the new version is published here with a new effective date. Questions and deletion requests: cuk.sscc@gmail.com.