Legal
Privacy Policy
Last updated: 8 June 2026
This policy explains what rookx collects when you use the website, game, accounts, chat, clans, reports, donations, optional analytics/marketing tags, and Lichess-related features.
1. Who is responsible for your data?
rookx is operated by Korab Zeciri and Edon Hashani, located in Switzerland. You can contact us through the Support page or by email at [email protected].
2. Data we collect
- Account data: player ID, email address, password hash, display name, avatar, profile settings, and optional profile details you add such as bio, gender, nationality, age, or birthdate.
- Gameplay data: ratings, matchmaking tickets, challenges, match results, moves, replay/share data, daily puzzle progress, leaderboard entries, and custom game assets you upload.
- Community data: friend requests, friendships, direct chat messages, clan membership, clan invites, clan chat, global chat, and moderation/report data.
- Support and safety data: bug reports, player reports, optional reporter email, IP address, user agent, timestamps, and security/rate-limit information.
- Lichess data, if you link Lichess: Lichess user ID, username, ratings, games needed for the linked feature, OAuth state, access token stored in encrypted form, and rating cache.
- Donation data: donations are handled by PayPal. rookx does not collect or store your card or PayPal login details.
- Optional analytics and marketing data, if you consent: Google Tag Manager may load analytics, advertising, remarketing, and campaign-measurement tags. These tags may process page URLs, device/browser information, event data, consent state, and similar measurement data depending on the tags configured in Google Tag Manager.
- Cookies and browser storage: a short-lived technical game-join cookie, local storage, service worker cache, and browser cache for login/session state, matchmaking, preferences, website assets, UI caches, cookie consent choices, and optional analytics/marketing storage if you consent. See Cookies & Storage.
3. Why we use this data
| Purpose | Examples | Legal basis we rely on |
|---|---|---|
| Provide the game and accounts. | Login, ratings, matchmaking, replays, leaderboards, profiles, settings | Performance of the service you request |
| Operate community features | Friends, direct messages, clans, clan chat, global chat | Performance of the service and our legitimate interest in running the community |
| Safety, moderation, and abuse prevention | Reports, blocks, rate limits, fraud/spam checks, enforcement | Legitimate interests and legal obligations where applicable |
| Support and bug fixing | Bug reports, diagnostics, page URL, user agent, logs | Legitimate interests in fixing and improving the service |
| Optional integrations | Lichess account linking and Lichess-backed play | Your request/consent where required, and performance of the linked feature |
| Payments/donations | Opening PayPal donation flow | Your request to make a donation and PayPal's own processing terms |
| Optional analytics and marketing | Measuring site usage, improving launch performance, campaign measurement, advertising, remarketing | Your consent where required |
4. What is public or shared with other users?
Your display name, avatar, ratings, leaderboard position, public profile fields you enable, clans, match history/replays, and game results may be visible to other users. Messages are visible to their intended recipients, clan members, or global chat viewers depending on where you post. Do not share private information in public or group chats.
5. Service providers and third parties
We use hosting, database, storage, security, and delivery providers such as AWS to run the service. If you grant optional analytics or marketing consent, Google Tag Manager and Google services may process measurement or advertising data according to the tags configured for rookx. If you open a donation flow, PayPal processes the payment. If you connect or play through Lichess features, Lichess receives the information needed to provide that feature. We may disclose information if required by law, to protect users, or to investigate abuse.
6. International transfers
rookx is hosted online and some providers or third-party services may process data outside your country or the EEA. Where required, we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, provider data protection terms, or similar lawful transfer mechanisms.
7. How long we keep data
We keep account data while your account exists. Gameplay, ratings, replays, leaderboard, moderation, and support records may be kept longer where needed for game history, security, dispute handling, or abuse prevention. Password reset tokens expire and are used only for account recovery. Browser storage remains until you log out, clear it, or your browser removes it. The game-join cookie is short-lived and is cleared/expired after it is used for matchmaking. Optional analytics or marketing cookies/storage depend on your consent choices and the tags configured in Google Tag Manager.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. Where processing is based on consent, you may withdraw consent. You may also have the right to complain to your local data protection authority. Contact us through the Support page or [email protected].
9. Children
rookx is not intended for children under 13. If your country requires a higher age for online services, you must meet that age or have permission from a parent or guardian.
10. Security and changes
We use technical and organizational measures to protect the service, but no online service is perfectly secure. We may update this policy when the service changes. The latest version will be posted on this page.