Privacy
bisaat keeps your email address and the chess work you do here. That is all. It is never sold, there is no advertising, there are no cookies, and nothing follows you around the internet.
Last updated 10 October 2026.
The short version
- We ask for one thing: your email address, so you can sign in and find your progress again on another device.
- We keep the chess: the games you review, the mistakes they found, your lessons, your puzzle rating and your openings.
- We never sell any of it, to anybody, for any price.
- There is no advertising and no tracking on this site. No analytics, no pixels, no cookies - not one.
- You can delete your account yourself, from the page, and your data goes with it.
What we keep, and why each thing is there
Your email address
There is no password here. You type your email, we send a six-digit code, and that signs you in. The address is kept so that the next time you sign in we know which progress is yours. That is the whole reason it exists in the database.
Your chess
Everything the site is for: the games you have reviewed, the mistakes it found in them and when they are due to come back, which lessons you have finished, your puzzle rating and every puzzle attempt behind it, the openings you have written down, and any feedback you send. It is kept so that it is still there tomorrow and on your phone.
Worth knowing about pasted games. When you paste a game in to review it, we store what you pasted. If it came from another chess site, the text usually carries your opponent's username in it. We do not read it, use it or publish it - but it is in there, because it is part of the game you asked us to keep. You can delete any of it by deleting your account.
If you bring in games from another site
You can type the name you play under on chess.com or lichess and we will fetch your last ten games so you can pick one to review. When you press that button, and only then:
- We send the username you typed to that site, from our server. Nothing else goes with it - not your email address, not your account here, not your internet address.
- What comes back is held for three minutes so that looking at the list twice does not mean asking them twice. After that it is gone, unless you have reviewed one of the games - then that game is kept like any other game you review.
- Your browser remembers the site and the username so you do not have to type them again. That is on your machine, in your browser's own storage, and is never sent to us.
Those games are public on the site you played them on, and their text carries your opponent's name in it, exactly as a game you paste in does.
Your internet address, in the server's log
Every request a web server answers is written to its log, and that line includes the address your internet connection is using. It is how a server is debugged when something breaks. We do not join it to your account, build a profile from it, or give it to anybody. The log is kept for 14 days and then deleted automatically.
If you play other people
In a live game the other player sees the name you chose and the moves you play. What you type in the chat is sent to them and kept with that game while it lasts.
Two things are written down and kept longer, and you should know about both:
- A message the filter stops is kept - the text, and that you typed it - even though it was never sent to the other player. If somebody is abusive, the message is the evidence.
- If somebody reports a game, the report keeps the reason, the moves, and the last part of the conversation, so a person can read it in context.
Games between two people are also looked over afterwards by the program. Nothing is ever done to anybody automatically as a result.
All of this clears itself after 45 days.
What we never do
- We never sell your data. Not to advertisers, not to data brokers, not to anybody, in any form, at any price.
- There is no advertising on this site, so there is nothing here that wants to know about you.
- There is no tracking. No Google Analytics, no Facebook pixel, no third-party scripts of any kind. The page loads from this site and nowhere else.
- There are no cookies. Your theme, whether the sound is on and the name you use for live games are kept in your own browser's storage, on your machine. They are never sent to us.
- We do not email you except the sign-in code you asked for. There is no newsletter and no marketing.
What we do with it
Your chess data is used to run the thing you came here for: to show you your own progress, serve puzzles at your level, bring your mistakes back and say how you are doing.
Beyond that, we look at it in aggregate to understand whether the product works - how many people finish a lesson, whether a feature is used at all, whether the rating estimate is accurate. That means counts and averages across everybody, never reading one person's games to learn about that person. Nothing identifying anyone leaves this site, and nothing about you is published.
Who else touches it
Two companies, both doing a job we would otherwise have to do ourselves. Neither is allowed to use your data for their own purposes:
- Supabase stores the accounts and the data, and sends the sign-in email.
- Cloudflare carries the traffic between your browser and the server, and keeps the connection encrypted. Like any such service it sees the addresses connecting to the site.
That is the complete list of anybody who holds your data.
There is one more thing that happens, and it is not storage: if you ask us to fetch your games from chess.com or lichess, we ask that site for them, which means sending them the username you typed. They see a request from our server for a page of theirs that is public anyway. Nothing of yours is sent with it and they are given nothing to keep. This only ever happens when you press the button.
Children
You need to be 10 or over to use bisaat. If you are under 18, a parent or guardian has to be happy for you to sign up, and by signing up you are telling us that they are.
We should be straight with you: that is a declaration you make, not something we can check. Indian law treats everyone under 18 as a child and asks for a parent's verifiable consent, and a tickbox is not verification. What we can honestly promise is the part that matters most for children: there is no advertising, no tracking and no profiling here at all, for anybody, so there is nothing on this site trying to learn about a child in order to sell to them.
If you are a parent and you would like your child's account and everything in it removed, email us and we will do it. We will not ask you to prove anything first.
How long things are kept
| What | How long |
|---|---|
| Your account and your chess data | Until you delete your account |
| Server log lines, with internet addresses | 14 days |
| Blocked messages and reports | 45 days |
| Games fetched from another site, before you review one | 3 minutes |
| Feedback notes you send | 45 days |
Your rights, and how to use them
You have these wherever you are. We give everyone the same rights rather than only the people whose law demands them.
- See what we have. Most of it is on the page already - your games, your mistakes, your lessons, your rating. Ask and we will send you the rest.
- Correct it. Tell us what is wrong.
- Delete it. Delete account is at the top of the page when you are signed in. It removes your account and every row belonging to it.
- Take it with you. Every reviewed game has a Download button that writes it out as a PGN file any chess program can read. Ask and we will send you the rest in a plain format.
- Withdraw your consent by deleting your account. Nothing is kept to hold you here.
- Complain. If we handle something badly, tell us first and we will try to put it right. You can also complain to the Data Protection Board of India, or to your own country's data protection authority.
One honest footnote on deletion. Deleting your account removes your account and all of its data immediately. If somebody reported a game of yours, that report is not removed by the button - it clears itself within 45 days, or sooner if you email and ask us to take it out.
Where your data is, and the law this follows
bisaat is run from India and this policy follows India's Digital Personal Data Protection Act, 2023. The servers that hold the data may be outside India, as is usual for anything on the internet.
If you are in the UK or the European Union, the rights above are the ones the UK GDPR and the GDPR give you, and we honour them for you in the same way. Our lawful basis for keeping your email and your chess data is your consent, which you gave by signing up and can withdraw at any time by deleting your account.
If this policy changes
The date at the top says when it last did. If a change actually matters - if we started keeping something new, or doing something different with what we have - we will say so on the site rather than quietly editing this page.
Who to contact
Write about anything on this page - a question, a correction, a deletion of your account or of a report about you, a request for a copy of what we hold, or something we have got wrong. It reaches the person who built this, and it is the right address for anything to do with your data.