SIGNALCHESS

Privacy policy

Informationen zur Verarbeitung personenbezogener Daten gemäß Art. 13 und 14 DSGVO. Stand: 14. Oktober 2026.

1. Controller and contact

The controller is naru media KG, Mariahilferstraße 88a, staircase 1, door 2, 1070 Vienna, Austria. Contact info@naru.at for privacy enquiries. Further company details are available in the Legal notice.

2. Account and use

We process your account details, particularly your name, email address, encrypted password information, settings and sign-in data, to provide your account and the requested features. The legal basis is performance of the contract or pre-contractual measures (Article 6(1)(b) GDPR). Mandatory details are required to provide the account.

3. Games, profiles and coaching

When you upload games or retrieve a public Chess.com or Lichess profile, we process player names, game data, evaluations and resulting analyses, as well as your notes, training progress and coaching messages. Processing serves the requested analysis and training (Article 6(1)(b) GDPR). Public game data comes from the selected chess platform; PGN files and your own content come from you. Publicly imported games may be stored jointly internally to avoid duplicate analyses. This does not make personal notes or coaching content public.

Coaches may use other people's data only with appropriate authorisation. Coaches processing their students' personal data on their own behalf must meet their own privacy obligations; any required data processing agreement must be arranged with us before such use.

4. Sharing

When you share a report, game or chat through a share link, anyone with that link can see the shared content. Share links deliberately and revoke sharing you no longer need within the product.

5. AI and external services

OpenAI may be used for AI coaching. Messages and chess analysis context needed for the requested response are transmitted to the AI provider. Do not enter sensitive information or unnecessary personal data in coaching messages. AI outputs serve as training aids; they do not make decisions about you with legal or similarly significant effects.

When retrieving external chess profiles, the selected platform receives the technical request and requested player name. If you use external sign-in, we process the identifiers and account information provided by that sign-in service. Technical hosting, email and payment providers may be used to operate the service. Contact info@naru.at for current information on recipients used for your account.

Transfers outside the EEA may take place only on a valid basis under Articles 44 et seq. GDPR, such as an adequacy decision or appropriate safeguards including standard contractual clauses. Information about the specific safeguards and a copy are available on request.

6. Operation, cookies and security

We use technically necessary cookies or local storage for sign-in, sessions, abuse prevention and your settings. Technical logs may contain IP addresses, timestamps, requested addresses, device data and error data. The basis is our legitimate interest in a secure, functioning service (Article 6(1)(f) GDPR). Non-essential tracking technologies require separate consent. We restrict access to necessary purposes and protect transmission using HTTPS.

7. Contact and billing

We process support enquiries to address your request (Article 6(1)(b) or (f) GDPR). Billing and contract data serves contract performance and statutory obligations (Article 6(1)(b) and (c) GDPR). Complete payment details are processed by the payment provider within the designated payment process.

Support über Gleap

Wir verwenden Gleap für das Support-Widget, Feedback und die Zuordnung deiner Anfragen zu deinem Konto. Bei angemeldeten Nutzern übermitteln wir die interne Nutzerkennung, Name, E-Mail-Adresse, Registrierungsdatum, Benutzername, Sprache, Kontorollen, E-Mail-Bestätigungsstatus und Tarifinformationen. Hinzu kommen die verbundenen Schachplattformen mit Anzahl und Status der Verbindungen sowie ausgewählte technische Angaben wie Seitenfunktion, Anfragekennung, App-Version, Browserumgebung und allgemeine Nutzungs- und Fehlerereignisse. Nachrichten und Anhänge, die du im Support selbst sendest, werden ebenfalls durch Gleap verarbeitet. Passwörter, Plattform-Tokens, Zahlungsdaten, private Coaching-Inhalte werden von unserer automatischen Support-Diagnose ausgeschlossen. Die Übertragung vollständiger Seitenadressen über die automatische Seitenerfassung und die technischen Ticketdaten ist ausgeschaltet. Seiteninhalte und Eingabefelder werden für automatische Aufzeichnungen vollständig ausgeblendet; rohe Netzwerk- und Konsolenprotokolle werden nicht erfasst. Gleap-Cookies sind in der Integration ausgeschaltet; die Zuordnung des Widgets kann über eine lokale Browserkennung erfolgen.

Affiliate program through Partnero

We use Partnero for our affiliate program. Only with your consent do we store a referral ID in an encrypted cookie for up to 30 days. If you create a new account, we send your email address as the customer identifier and the associated partner identifier to Partnero from our server. A native Stripe connection processes payment, subscription and refund events to calculate commissions. Partners cannot see your contact details. At /affiliates you can clear referral attribution on this browser. For access to or deletion of data already transmitted, contact info@naru.at. Partner program applications are processed directly in the Partnero portal.

8. Retention periods

Account and training data is retained as long as necessary for use of the service. After account deletion, it is deleted or anonymised unless statutory retention obligations or justified legal claims prevent this. Invoices and tax-related documents generally must be retained for seven years. Security logs and backups are retained for their specified purposes and deleted when no longer needed; deletion may take effect in backups with a delay.

9. Your rights

Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. You may withdraw consent at any time with future effect. Contact info@naru.at to exercise these rights. You may complain to a data protection supervisory authority, particularly the Austrian Data Protection Authority.

10. Minors and changes

For minors, the required consent of parents or guardians and applicable age limits must be observed. This policy is updated when actual processing or legal requirements change.