Cookie Policy

1. What are cookies?

Cookies are small text files placed on your device when you visit a website or use a web application. They allow the site to recognise your device, remember your preferences, and collect information about how you use the service.

Similar technologies we may use include:

• Web beacons / pixels: Tiny invisible images embedded in pages or emails that record whether content was opened and from what IP address.
• Local storage / session storage: Data stored directly in your browser to maintain your session or preferences within the web app.
• Device fingerprinting: Technical attributes of your browser and device used by security and fraud detection tools to identify suspicious patterns.

When we refer to "cookies" in this policy, we mean all of the above technologies collectively.

2. Why we use cookies

We use cookies on ChessOnes to:

• Keep you securely logged in during and between sessions
• Remember your platform preferences (board theme, language, time control defaults)
• Understand how users navigate and use the platform so we can improve it
• Detect and prevent cheating, fraud, and account security threats
• Measure the reach and effectiveness of our marketing communications

3. Categories of cookies we use

3.1 Strictly necessary cookies

These cookies are essential for the ChessOnes web application to function. They cannot be disabled without breaking core functionality such as logging in and playing games.

What they do:

• Maintain your authenticated login session
• Protect against cross-site request forgery (CSRF attacks)
• Distribute server load across infrastructure (load balancer cookies)
• Store your cookie consent preferences so we do not ask repeatedly

Legal basis (GDPR): Exempt from consent requirements. These are technically necessary to deliver the service you have requested.

Duration: Session cookies expire when you close your browser. Authentication tokens for "remember me" persist for up to 30 days.

3.2 Functional / preference cookies

These cookies remember choices you make so your experience is consistent across sessions. Disabling them will not break the platform but may mean your preferences reset on each visit.

What they do:

• Remember your preferred board colour scheme and piece set
• Save your default time control and game format
• Remember your selected language or locale
• Store notification preferences

Legal basis (GDPR): Legitimate interest / consent.

Duration: Up to 12 months.

3.3 Analytics cookies

These cookies help us understand how users interact with ChessOnes so we can make data-driven improvements to the platform.

Provider: Google Analytics (operated by Google LLC, United States)

Cookies set:

• _ga — Distinguishes unique users and sessions. Duration: 2 years.
• _gid — Distinguishes users across a 24-hour session. Duration: 24 hours.
• _gat — Throttles the rate of requests to Google's servers. Duration: 1 minute.
• _ga_[ID] — Stores session state for Google Analytics 4 properties. Duration: 2 years.

What this data includes: Pages visited, features used, session duration, approximate location (country/region), device type, and browser. IP addresses are anonymised before storage where this setting is enabled.

Data is sent to: Google's servers in the United States. Google acts as our data processor under a Data Processing Agreement.

Google's Privacy Policy · Opt-out tool

Legal basis (GDPR): Consent. These cookies are not placed until you actively accept analytics cookies via our consent banner.

3.4 Marketing and tracking cookies

These cookies track activity on our platform and help us measure the effectiveness of our marketing. They may also be used by the third-party provider to show ChessOnes-related content to you on their own platforms.

Provider: Meta Pixel (operated by Meta Platforms, Inc., United States)

Cookies set:

• _fbp — Identifies browsers for ad delivery and conversion tracking. Duration: 90 days.
• fr — Stores ad preferences and targeting data. Duration: 90 days.
• datr — Browser identifier used by Meta for security. Duration: 2 years.

What this data includes: Pages visited on ChessOnes, actions taken (e.g., account creation), IP address, and browser information. If you have a Facebook/Instagram account, Meta may link this data to your social profile.

Data is sent to: Meta's servers in the United States.

Meta's Privacy Policy · Ad preference controls

Legal basis (GDPR): Consent. These cookies are not placed until you actively accept marketing cookies via our consent banner. EU and UK users must opt in explicitly — no pre-selected defaults are used.

4. Cookie summary table

5. Social login and third-party cookies

When you use "Sign in with Google" or "Sign in with Facebook," those providers run their own authentication flow and may set their own cookies as part of that process. These cookies are set by Google and Meta respectively, are governed by their own privacy and cookie policies, and are not within ChessOnes' control.

6. Your choices and how to manage cookies

6.1 Cookie consent banner (web application)

When you first visit ChessOnes, and periodically after consent expires, you will see a cookie consent banner. Your options are:

• Accept All — activates all cookie categories
• Reject All — activates strictly necessary cookies only
• Customise — choose which categories to enable or disable

Your preferences are saved and applied on every subsequent visit. You can update your choices at any time by clicking "Cookie Settings" in the footer of any page.

6.2 Browser-level controls

You can configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in and using the platform. Browser guides:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Apple Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions

6.3 Third-party opt-out tools

• Google Analytics opt-out
• Meta Ad Preferences
• Network Advertising Initiative
• Digital Advertising Alliance

6.4 Do Not Track

Some browsers send a "Do Not Track" (DNT) signal to websites. ChessOnes does not currently alter its data collection in response to DNT signals, as no universal standard exists for how they should be interpreted. You can manage your preferences directly through our consent tool at any time.

7. EU and UK users — consent requirements

In compliance with the EU ePrivacy Directive and the UK Privacy and Electronic Communications Regulations (PECR), ChessOnes will not place any non-essential cookies on your device without your prior, freely given, specific, informed, and unambiguous consent.

This means:

• No non-essential cookies are set when you first load the platform
• The consent banner presents a genuine "Reject All" option at the same level as "Accept All"
• Pre-ticked boxes are never used for non-essential categories
• Consent can be withdrawn at any time with immediate effect, via Cookie Settings in the footer
• Withdrawing consent does not affect your ability to use the platform

8. Updates to this policy

We may update this Cookie Policy when we add new third-party tools, change our infrastructure, launch mobile applications, or in response to changes in applicable law. When we do, we will update the "Last Updated" date above. For significant changes, we will notify you via the platform or by email.

9. Contact

Questions about cookies or this policy: