LearnTrainRated
Sign up

Privacy policy

Last updated 6 November 2026

Data

  • Account: email, password, username, games, ratings, progress. Required for an account. Basis: contract. Kept until the account is deleted; finished games are then kept without the name. Public: username, ratings, games.
  • Account email: a record of each email sent about your account: its kind, the address, when, and the result, never the message or its link. Basis: legitimate interest (answering questions about mail). Kept until the account is deleted.
  • Guests: games and daily votes, to play without an account, also in other players' rooms. Basis: legitimate interest (play without an account). Linked to the browser for up to 400 days.
  • Analyses: when a signed-in player asks for one, an AI on our own servers judges one seat's decisions in an ended game; its verdicts are stored with the game. Nothing is sent outside. Basis: legitimate interest (helping players improve). Public with the game's replay; kept with the game, also after an account is deleted.
  • Analysis requests: which games and seats the account asked to analyse, and when, to limit new Analyses per day. Not public. Basis: legitimate interest (keeping the service running for everyone). Kept until the account is deleted.
  • Feedback: what you send with the Feedback form: the message, where on the site it was sent from, the browser and screen size, the account if signed in, and the IP address for 30 days to limit spam. Read by staff only. Basis: legitimate interest (improving the site). Kept until deleted; kept without the account after the account is deleted.
  • Security: IP address and browser at sign-in, kept up to 8 days after the last visit. A record of security events (such as sign-ups, sign-ins and failed attempts, password changes, staff actions and refused requests) with the IP address and browser, kept 30 days on our own servers, also after an account is deleted. Basis: legitimate interest (keeping accounts safe).
  • Marketing email: news about features, leagues and tournaments, a few times a year. Sent only if opted in on sign-up or the account page. Uses the email address. Basis: consent, which can be withdrawn at any time on the account page or by unsubscribing. Kept until the account is deleted.
  • Statistics: page views and anonymous actions, counted without cookies and without keeping who visited. Basis: legitimate interest (knowing how the site is used).
  • Diagnostics: error reports and performance samples: the page or route, browser and operating system family, the game or room involved. Never the account, IP address, cookies or what was typed. Nothing is stored on the device. Server logs (what the servers did) may be sent too: they name a game or account only by its id, and never carry an IP address, email address or username. Basis: legitimate interest (keeping the site working). Kept for Sentry's retention period.
  • Backups: kept 30 days.

Processors

  • Cloudflare: network and security in front of the site, and backup storage (R2, EU). Receives every request, including IP addresses. Transfer basis: EU–US Data Privacy Framework (EU adequacy decision) and EU standard contractual clauses (copy on request).
  • Resend: email delivery. Receives email addresses and message content. Stores them in the US for up to 30 days. Transfer basis: EU–US Data Privacy Framework (EU adequacy decision) and EU standard contractual clauses (copy on request).
  • Sentry: diagnostics for errors and performance, stored in the EU. Receives the diagnostics above, never the visitor's IP address: the browser sends them through this site. Transfer basis: EU–US Data Privacy Framework (EU adequacy decision) and EU standard contractual clauses (copy on request).

Rights

  • Deletion: on the account page.
  • Access, a portable copy, correction, restriction, objection: [email protected].
  • Complaints: IMY, the Swedish Authority for Privacy Protection, imy.se.