Privacy Policy
Last updated: 4 May 2026
Climbchess is operated by USOV Family Trust (trading as MRU Consulting), Australia. This page describes what we collect and why.
1. What we collect
- Training state: per-concept Elo, puzzle history, streak, settings, language preference, anonymous user ID (UUID v4 generated in your browser). Stored locally in your browser (
localStorage) and synced to our Cloudflare D1 database via Cloudflare Workers. - Account data (if you sign in): handled by Kinde as our authentication provider. Kinde stores your email, name, and authentication tokens. We receive your Kinde user ID and use it as your sync key. Refer to Kinde's privacy policy for full detail on auth data handling.
- Anti-abuse: when you submit feedback we use Cloudflare Turnstile, which may collect a privacy-preserving signal about your browser to verify you are human. No tracking cookies.
- Aggregate analytics: Cloudflare Web Analytics (cookie-free, IP-anonymised) and Cloudflare Workers logs (IP, request path, timing). No third-party trackers, no advertising pixels.
2. What we do NOT collect
- No cookies for tracking. No advertising or marketing tags.
- No selling or sharing of personal data with third parties.
- No payment data (the product is currently free).
3. Where data lives
All sync data is stored in Cloudflare D1, region: Asia-Pacific. Backups are kept by Cloudflare under their standard durability policy. Authentication data lives with Kinde (region per Kinde's policy).
4. Retention
Training state is retained until you delete your account or reset your data. Cloudflare Workers request logs are retained for up to 30 days. If you delete your account, all sync state is removed within 24 hours.
5. Your rights and how to delete data
- Delete from this device: Settings → "Reset all data".
- Delete from our servers (full account deletion): Settings → "Delete account". This issues an immediate
DELETEto our sync API and clears local storage. If you signed in via Kinde, you will also be signed out; to remove your Kinde account contact [email protected] and we'll forward the request. - Export your data: Settings → "Export progress (JSON)".
- You can also email [email protected] for any request under Australian Privacy Principles or GDPR (data access, correction, deletion, portability).
6. Children
Climbchess is suitable for all ages. We do not knowingly collect personal data from children under 13. If you believe a child has signed up with personal data, please email us and we will delete the account.
7. Changes
We will update the "Last updated" date at the top of this page when we change anything material. Continued use after a change constitutes acceptance.
8. Contact
USOV Family Trust (MRU Consulting) — [email protected] — Australia.
Climbchess