Checkers online

Win by capturing all of your opponent’s pieces.

Home

Privacy

Privacy Policy

Clear disclosure: guest JWT, local storage, game history, and sockets - we do not sell your data. Updated: September 2026.

Teal privacy shield with lock for Checkers online

Who we are

“Checkers online” is a web app for Russian draughts 8×8 (plus English and International variants). Contact: [email protected].

The Chrome extension has its own short policy at /extension/privacy - same product, different storage (chrome.storage).

Secured data vault illustration

What data we collect

We collect only what the game needs to run. We do not sell personal data.

  • Account (if you register): email and password hash; nickname, avatar, ELO, win/loss stats.
  • Guest JWT: on first visit we create a guest via POST /api/auth/guest (no email) and store access/refresh tokens in the browser.
  • Game history and board state on the server (SQLite/MySQL) so you can resume on web or extension.
  • Game preferences you set (move time, who moves first, bot strength, variant).
  • Technical server logs (IP, request time) for normal API operation - no separate ad analytics.

Where data is stored

Browser localStorage holds session and UI keys. The Chrome extension mirrors session data in chrome.storage.local instead of localStorage.

Third-party analytics cookies are not used. Browser cookies may exist only as part of normal HTTP/WebSocket operation.

  • checkers_access_token / checkers_refresh_token - JWT session
  • checkers_guest_id - soft guest identity
  • checkers_game_settings - last game-creation settings
  • checkers_guest_welcome - guest welcome flag
  • checkers_lang - UI language
  • local toast / notification history in the browser
  • Extension: same session keys in chrome.storage.local (+ optional board snapshot for resume)

Sockets & online play

For online games, matchmaking, and move sync the client connects to Socket.IO with JWT in auth.token. Events carry game state between players so matches can run in real time.

Socket traffic is for gameplay only. We do not sell socket or matchmaking data to third parties.

Third parties

There are currently no ad networks, social pixels, or external analytics SDKs. Payments are not connected.

Hosting and infrastructure (if you self-host) are up to the operator; this policy describes application logic, not every possible host’s logs.

Retention & your rights

Game and account data are kept while the service runs or until you request deletion. You can sign out in the UI (tokens are cleared from storage).

To delete an account or history, email [email protected] - there is no self-serve “delete all” button yet. We will handle reasonable deletion requests manually.

Children

The service is not aimed at collecting children’s data. If you believe a minor’s data entered the system, contact us and we will remove it.

Contact

Privacy questions: [email protected]. Extension policy: /extension/privacy.