1. Data Controller
The data controller responsible for your personal data is:
- Name: Sergio Asenjo Alcalde
- Contact email: helloflowchess@gmail.com
- Service: FlowChess — AI-powered chess analysis tool
2. Data We Collect
We only collect the following personal data:
- Email address, obtained through Google OAuth sign-in. This data is required to identify you as a user and grant access to the service.
- Google avatar and display name (if available in your account), used solely to display them in the app interface.
- Internal usage data: number of analyses performed per day, solely to enforce free-plan limits.
We do not collect data from your chess games. The analysis engine (Stockfish) runs entirely in your browser; no position or move ever leaves your device.
3. Purpose and Legal Basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Access management and authentication | Performance of a contract (art. 6.1.b) |
| Usage limit enforcement (free plan) | Legitimate interest (art. 6.1.f) |
| Communications about the beta service | Consent (art. 6.1.a) |
4. Data Processors
To provide the service, we work with the following external providers acting as data processors:
- Supabase Inc. (USA) — User data storage and authentication. Supabase complies with GDPR through standard contractual clauses.
- Google LLC (USA) — OAuth authentication provider. See Google's privacy policy.
- DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) (China) — AI model used to generate chat responses and chess analysis. The conversation context (moves, questions) is sent to their API to generate responses. No personal identifying data is included in these requests. See DeepSeek's privacy policy.
We do not sell, transfer, or share your personal data with third parties for commercial or advertising purposes.
5. Data Retention
We retain your data for as long as you maintain an active FlowChess account. If you request account deletion, we will erase your personal data within a maximum of 30 days, unless required by law to retain it.
6. Your Rights
Under GDPR, you may exercise the following rights by emailing helloflowchess@gmail.com:
- Access: Know what data we hold about you.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Portability: Receive your data in a structured format.
- Objection and restriction: Object to or restrict certain processing activities.
Want to delete your account? You can exercise your right of erasure at any time by sending an email to helloflowchess@gmail.com with the subject "Delete account". We will erase all your data within 30 days.
If you believe we have infringed your rights, you may lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.
7. Cookies
FlowChess uses only strictly necessary technical cookies for the authentication system (user session). We do not use advertising or third-party tracking cookies without your explicit consent. You can manage your preferences at any time via the "Cookie Preferences" link in the footer.
