Who this covers
chesstournaments.app is an independent site for the United States. It is not US Chess. The operator is the owner of this deployment. Contact [email protected] for access, correction, or deletion of an adult account.
Children and COPPA
We do not knowingly collect personal information from children under 13. There is no child account, no child email field, and no birth date field. A parent or coach may store a public US Chess ID and a short note of their own. That note is limited to 40 characters and is not a place for a school, address, or phone number. If you believe a child submitted personal information, use the removal form. We will suppress the player page on this site and delete roster rows for that ID. We cannot delete the official rating list.
The FTC’s COPPA rule, including the 2025 amendments, and state privacy laws are the reason player profile URLs are noindex. Do not send us a photograph, a school name, or a precise location for a minor.
What we store
- Adult account email, password hash, role, and the time the adult checkbox was confirmed.
- Session identifiers stored as hashes. The raw token lives in an httpOnly cookie.
- Roster IDs, alert settings, and organizer event text that the adult submitted.
- Polar customer and subscription IDs. Card numbers stay with Polar.
- Aggregate page counts by path and day. Player IDs in paths are replaced with a placeholder. We honor Do Not Track by skipping the count.
- Cached public rating responses, so we do not hammer the US Chess API.
What we do not do
We do not sell personal information. We do not scrape registration sites. Public ratings are factual records already published by US Chess. Google Tag Manager (GTM-P77TLJ9G) loads on each page; tags inside that container are configured in Google Tag Manager.
Retention
Account data stays until you delete the account or ask us to. Webhook ids are kept so a payment notice is not applied twice. Cache rows expire. Removal requests are kept long enough to show that we honored them.
Processors
Polar is the merchant of record for paid plans. Checkout is embedded in a panel on this site. Transactional email goes through the provider named in the server environment, if one is configured. The database runs on the operator’s own Postgres, not a hosted database brand.