Privacy Policy

Effective 21 October 2026

This policy explains what personal information Nox Chess — the blindfold chess website at noxchess.com, its game server and Nox Chess accounts (“Nox Chess”, “we”, “us”) — collects, why, how long it is kept, who it is shared with and how you can control it. It is written to meet the Personal Information Protection Act of the Republic of Korea and, for visitors in the European Union and the United Kingdom, the GDPR.

Who is responsible

Operator

녹스 체스(Nox Chess)

Representative

김민우

Address

제주특별자치도 서귀포시 대정읍 에듀시티로 74, 110동 106호(라온프라이빗에듀)

Business registration number

729-18-02496

Email

jadenk349@gmail.com

Effective date

2026-10-21

Using Nox Chess without an account

You can play the bot, play friendly games as a guest, and use the lessons and practice drills without signing in. We do not ask for your name or email to do so. A guest is given a guest name (for example “Guest-12345”), which other players see during a game. Your progress as a guest is kept only in your own browser’s local storage. A guest still produces the technical information described below (such as a random identifier and connection logs).

What we collect, why, and for how long

Your account

• Collected: your email address; if you sign in with Google, the name, profile picture link and account identifier Google shares with your permission; the sign-in method you used; sign-in records kept by our authentication provider, including timestamps and the IP address used. With an email address and password instead, the password is handled by Supabase, stored only in hashed form, and never sent to our game server.
• Why: to create your account, sign you in and keep you signed in.
• Kept: until you delete your account.

We do not receive your Google password, and we do not request access to your Gmail, contacts, calendar, Drive or any other Google data.

Your profile, ratings and progress

• Collected: the username you choose; your profile picture link; your ratings (one for each game vision and one for puzzles) and the record of rated games that moved them; which puzzles you have solved; your practice levels and statistics; which lessons you have finished; your language choice; your plan (Free, the free trial with its dates, or a paid plan), how many Study Board and Puzzle Rush sessions you start each day, and a history of changes to your plan.
• Why: to run the game, rate it fairly, keep your progress between devices and apply your plan.
• Kept: until you delete your account.

What is public. Your username, profile picture and ratings are visible to other visitors — on the leaderboards, in player search, on your player page and on the game screen when you play. Your email address is never shown to other players. Paid plans are not on sale yet, and no payment details are collected.

Friends and invitations

• Collected: your friends list, friend requests you send or receive, and your personal friend-invite link. If you use “Send Email Invite”, the address you enter.
• Why: to run friends, challenges and invitations.
• Kept: friends and requests until they are removed or you delete your account. An invitation address is used to send that one email through our email provider, recorded in our server log that it was sent, and held in memory for about an hour to limit repeated invitations; it is never added to a mailing list.

Games and chat

• Moves and chat in online games pass through our game server to your opponent. While a game is in progress its moves, clocks and seats are stored so that a reload or a server restart does not end it; that record is deleted when the game ends (or, if nobody returns to it, after 30 minutes). The server does not keep a record of finished games or of the chat messages it delivers.
• Chat moderation. Before a chat message is delivered, our server checks it automatically against our community guidelines; nothing you write is sent to another company to be checked. A message that is blocked or held is not delivered, and the server keeps a record of it — its text, when it was sent, the game and your account — so that repeated violations can pause your chat and a moderator can review it. The text is deleted after 30 days and the rest of the record after 180 days; contact details you tried to send are never kept.
• Chat as a guest. A pause on a guest’s chat is tied to a random key your browser keeps and, while the pause lasts, to the IP address you connected from, so that reloading the page does not lift it. These are held only in the server’s memory.

Reports and blocks

• Reports. If you report a player, we keep the reason you chose, anything you wrote, and that player’s last few chat lines in the game you reported (which the server holds in memory for up to an hour after they were said, for this purpose only). This goes to a moderator as part of that player’s record, on the same 30-day and 180-day schedule as chat moderation. Your identity is not added to the record and the reported player is not told who reported them.
• Blocks. If you block a player, we keep who you blocked, their name at the time and when, so that the block can be enforced. A block between two accounts is kept until you unblock them or either account is deleted; any block involving a guest is held only in the server’s memory. The blocked player is not told.

Technical information

• Connection logs. Our game server and hosting providers log basic connection information, including your IP address, to operate the service, keep it secure and fix problems.
• Usage statistics. Pages tell our own server which part of the site is open and when things happen, such as a game starting or a puzzle being solved. This is tied to a random identifier kept in your browser and, if you are signed in, to your account. It never includes your moves, your messages or anything you type, and it is not used for advertising.

Connection logs kept for

7 days

Usage statistics kept for

6 months

Cookies and browser storage

Nox Chess does not use advertising cookies, and does not collect information about your visits to other websites or apps for advertising. The site uses your browser’s local storage to keep you signed in, remember your settings and progress, keep the random identifiers described above, and cache game analysis on your device. You can remove it at any time by clearing your browser’s site data for noxchess.com; you will then be signed out and progress kept only in the browser is lost.

Pages load fonts from Google Fonts and the sign-in library from esm.sh, which means those services receive your IP address when your browser fetches them. The chess engine runs in your own browser.

Our legal basis

We process the information above because it is necessary to provide the service you asked for (your account, games, friends and progress), because we have a legitimate interest in keeping the service safe and fair and understanding how it is used (chat moderation, reports, blocks, logs and usage statistics), and where the law requires it. We do not rely on consent for anything described here; if that changes, we will ask first.

Sharing and providing information

We do not sell, rent or provide personal information to third parties for their own purposes. It is disclosed only to other players to the extent described under “What is public”, or when required by law or where necessary to protect the safety, rights or security of our users or the service.

Service providers and transfers abroad

We entrust the processing of personal information to the companies below, which run parts of Nox Chess for us and may use it only for that. Because they operate servers outside the Republic of Korea, using Nox Chess involves transferring your information abroad. The transfer happens over the internet as you use the service, and is necessary to provide it; you can avoid it only by not using the service (or, for accounts, by not creating one).

Each keeps information only as long as it needs to provide its service to us, and no longer than the periods given in this policy. Their own privacy policies explain how to contact them.

Deleting information

When a retention period above ends, or you delete your account, the information is deleted. Electronic records are deleted so that they cannot be recovered; we keep no paper records. Deleting your account removes your profile, ratings, progress, friends, friend requests, blocks and plan from our database. Some records outlive it: the results of rated games you played stay in your opponents’ histories with your account removed from them, and records of plan changes are kept with the account removed. Moderation records about your chat are kept until their own 180-day period ends, because they exist to protect other players, and usage statistics until their own period ends.

Your rights

You may ask to see, correct, delete or stop the processing of your personal information, to receive a copy of it, or to object to how it is used. A parent or other legal representative may make these requests for a child, and someone you authorise may make them for you. Email the address above from the email address on your account; we will reply within 10 days. We may refuse or limit a request where the law allows, and will tell you why. If you are in the European Union or the United Kingdom you may also complain to your local data protection authority.

You can also remove Nox Chess’s access to your Google account at any time from your Google Account’s security settings.

Children

You must be at least 14 years old to create an account. We do not knowingly collect personal information from children under 14 through accounts. If you believe a child under 14 has created an account, contact us and we will delete it.

How we protect information

• Technical: every connection is encrypted with HTTPS; database access rules let players change only their own information; the keys that can read server-only records are held by the game server alone; passwords are stored only in hashed form by our authentication provider.
• Administrative: only the operator can reach moderation records, through an admin page restricted to named accounts, and every time a moderator opens a case or acts on it is logged.
• Physical: our information is held in the data centres of the providers above, under their physical security.

No method of storing or sending data is completely secure. If personal information is, or is likely to have been, leaked, we will tell the people affected and the authorities as the law requires.

Privacy officer

Our privacy officer handles questions, requests and complaints about personal information.

Privacy officer

김민우 (대표)

Email

jadenk349@gmail.com

Phone

010-6631-0994

If something goes wrong

If you are not satisfied with our answer, you can also ask for help from these organisations in the Republic of Korea:

• Personal Information Infringement Report Center: privacy.kisa.or.kr, call 118
• Personal Information Dispute Mediation Committee: kopico.go.kr, call 1833-6972
• Supreme Prosecutors’ Office cybercrime investigation: spo.go.kr, call 1301
• Korean National Police Agency cyber bureau: ecrm.police.go.kr, call 182

Google user data

We do not use information received from Google for advertising or for any purpose other than signing you in and providing the features described here. Nox Chess’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Language of this policy

This policy is published in several languages. For users in the Republic of Korea the Korean version applies; otherwise, if a translation differs from the English version, the English version applies.

Changes to this policy

If we change this policy we will update this page and its effective date, and announce the change on the site at least 7 days before it takes effect — 30 days before, if it changes what we collect or who we share it with in a way that matters to you.