Privacy Policy
Last updated: 15 August 2026
This policy explains what personal data Fantastic Chess collects, why, and what you can do about it. It is written to be read, not to be survived.
1. Who is responsible
The controller of your personal data is:
- KIS Consultancy BV
- de Vlasroot 3, 5555 KR Valkenswaard, The Netherlands
- Chamber of Commerce (KvK): 69060185
- Email: privacy@fantasticchess.com
We have not appointed a Data Protection Officer; we are not required to. Privacy questions go to the address above.
2. What we collect, and why
| Data | Why we have it | Legal basis (GDPR Art. 6) |
|---|---|---|
| Email address | Creating your account, signing you in, password recovery | Performance of a contract |
| Username and display name | Identifying you in multiplayer, leaderboards and head-to-head records | Performance of a contract |
| Account identifier | Linking your progress, cards and ratings to you | Performance of a contract |
| Gameplay data — match results, ratings, cards owned, campaign progress, and a record of your finished games | Running the game: saving progress, ranking players, matchmaking, replays | Performance of a contract |
| Purchase records | Delivering gems you have bought and honouring them if delivery fails | Performance of a contract / legal obligation (tax records) |
| Usage analytics — screens opened, matches started and finished, cards played, app version, device type, and an app-instance identifier | Understanding which parts of the game people use, so we can improve it | Consent — you can turn this off at any time |
| Crash and performance diagnostics | Finding and fixing crashes | Consent — you can turn this off at any time |
Analytics and crash reporting are optional
You control them in the app under Account → Analytics. Turning them off stops collection going forward. The game works identically either way, and we never make features conditional on leaving them on.
3. What we do not do
- We do not show advertising, and there is no advertising SDK in the app.
- We do not track you across other apps or websites, and we do not build advertising profiles.
- We do not sell or rent your personal data to anyone.
- We do not ask for your contacts, location, camera, microphone or photos.
4. Who else processes your data
We use a small number of service providers. They process data on our instructions under data-processing agreements, and only for the purposes below.
| Provider | What they do for us |
|---|---|
| Microsoft (PlayFab) | Accounts, sign-in, player data, card inventory, ratings |
| Cloudflare | Our game server, multiplayer matchmaking, and the game archive |
| Google (Firebase) | Analytics and crash reporting — only with your consent |
| Apple / Google | App distribution, sign-in, and processing your purchases |
Apple and Google are the sellers of record for in-app purchases. They handle your payment details directly — we never see your card number.
5. International transfers
Some of these providers process data outside the European Economic Area, including in the United States. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework. You can request a copy of the relevant safeguards from us.
6. How long we keep it
- Account and gameplay data — for as long as your account exists.
- Game archive — your finished games are kept while your account exists, so you can replay and review them.
- Analytics — retained by Firebase on a rolling window, currently up to 14 months.
- Purchase and tax records — kept as long as Dutch tax law requires, currently seven years, even after your account is deleted.
7. Deleting your account
You can delete your account from inside the app: Account → Delete account. It is permanent and immediate. It erases your account, your cards, your ratings and progress, and your archived games from our systems.
You can also request deletion by email — see Delete your account.
One thing deletion cannot remove. If you played online matches against other players, those players keep their own record of the games they played, which includes the display name you were using at the time. We cannot erase another player's game history, and their record is theirs. Nothing else about you remains in it.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you, and get a copy;
- correct data that is wrong or incomplete;
- have your data erased;
- restrict or object to how we process it;
- receive your data in a portable, machine-readable format;
- withdraw consent for analytics and crash reporting at any time, without affecting anything processed before you withdrew it.
Email privacy@fantasticchess.com and we will respond within one month. If you are unhappy with how we handled it, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl), or to the supervisory authority where you live.
9. Children
Fantastic Chess is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.
10. Security
All traffic between the app and our servers is encrypted in transit. We never store your password — authentication is handled by PlayFab, and passwords are stored salted and hashed on their side. Access to player data is limited to the people who need it to run the game.
11. Changes to this policy
If we change this policy in a way that materially affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.
12. Contact
KIS Consultancy BV — privacy@fantasticchess.com