Privacy policy

Last updated 7 November 2026.

Chess.sg Pte. Ltd. ("we") runs RatingLeaks. We keep as little about you as we can. In short: your games and the analysis stay in your browser; if you buy, we keep what we need to give you access.

What happens when you scan

• The usernames you type are sent from your browser straight to Lichess and Chess.com to read your public games. They are not sent to our servers during a scan.
• The games, the engine analysis and your report are stored only in your own browser (local storage), so you can reopen your last report. Clearing your browser data removes them.

What we keep if you buy

• Our payment partner, the merchant of record, handles your payment details, name, email and billing address under its own privacy policy. We don't see your card details.
• We keep your access key (or a fingerprint of the key from the payment partner), the plan you bought, the usernames you bought it for, the email the payment partner gives us, and for Coach members a short summary of each report (your leaks and their sizes) to show your progress over time.
• We keep these while your purchase or subscription is active and for up to 2 years after, unless you ask us to delete them sooner.

Analytics

We count page events (for example "scan started" or "report built") and the site that referred you, without cookies and without storing IP addresses or usernames. Our host, Netlify, keeps short-term technical logs, including IP addresses, to run and protect the service.

Messages

If you write to us through the contact form, we keep your email and message to answer you, and delete them within 2 years.

Who processes data for us

• Netlify (hosting and storage)
• Our payment partner (payments, receipts, tax)
• Lichess and Chess.com (your browser fetches your games from them directly)

Your rights

You can ask to see, correct or delete what we hold about you, or object to how we use it, through the contact page. We'll answer within 30 days. If you're in the EU or UK you can also complain to your data protection authority; in Singapore, to the PDPC.

Children

RatingLeaks is not meant for children under 16 to buy. A parent can buy it for a child's games.