Last updated 1 November 2026

Privacy policy

ChessStory turns your public Chess.com games into a poster you can have printed. This policy explains what we keep, why, for how long and who handles it. In short: to see your poster we read your public games in your own browser and keep nothing. We keep your username and the year only if you save a design to order, and delete them 30 days after your last visit unless an order needs them.

Who we are

ChessStory is run by Romestraat Technologies Ltd (company number 16342990), registered office: Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London E14 9NN. We are the data controller for the personal data described here. Contact us at [email protected].

What we keep

Seeing your poster. You type a Chess.com username. Your browser asks Chess.com for that player's public games, one request at a time, and draws the poster. We do not receive or store the games. There is no sign-in and we never ask for a password.

Choosing to order. When you go to pay, your browser is given an anonymous session, so we can save your choice. We keep the Chess.com username and the year on your poster with that session, and delete them 30 days after your last visit, unless an order needs them.

Paying for a print. Stripe takes your payment and gives us the email address you enter, for your receipt, and the delivery address. We never see your card number. We keep the address, the email, what you bought and the design you chose as our purchase record, for 6 years, to meet UK accounting rules. To make the print, our print service opens your poster and reads the player's games from Chess.com again, up to the moment you paid, so the poster printed is the one you saw. The finished poster image is kept for 30 days after the order is posted, in case a parcel arrives damaged, and then deleted. With your tick at checkout, the poster and the delivery address go to our print partner, Prodigi, and nothing else.

Giving a gift. You tell us your own name as it should appear on the card, the first name of the person the gift is for, their email address, an optional note and the day to send it. We email the gift to them on that day, through Resend. Their email address is used for that one email, and we delete it as soon as the email is sent, or sooner if they spend the gift first, it is refunded, or its payment page expires unpaid. We keep the record of your gift for 6 years, to meet UK accounting rules, as we do for an order: what you gave, when, the amount, your email address and name from Stripe, the name and note you put on the card, and the first name of the person it is for.

Cookies. One cookie keeps your anonymous session so your order and gift pages work in the same browser. It is strictly necessary. We use no analytics, advertising or tracking cookies.

We do not sell your data, use it for advertising, combine it with other data, or put it into any artificial intelligence system.

Why we are allowed to

Our basis is legitimate interests: Chess.com publishes players' games for anyone to read, and drawing a player's public games into a poster, for them or as a gift, is what the service is. When you give a gift, or order a poster for someone else, you print another player's public games, and their username and year are handled as described above. For the payment, the print and the delivery, our basis is providing what you asked for and keeping the records the law requires. If you would rather not be drawn, tell us and we will delete it.

Who handles it

Chess.com, where the games come from, read in your browser. Chess.com's own use of data is covered by its privacy policy.
Stripe, which takes payment, and Prodigi, which prints, frames and posts your order. Prodigi receives only the finished poster and the name and address to deliver it to.
Resend, which sends our emails, such as a gift or a receipt. Resend keeps its own log of the emails it sends, with the address each went to, for a short time.
Sentry, which receives error reports. They carry account ids, never your games or your email address.
Our hosting providers: Hetzner, which runs our servers in Germany, and Cloudflare, which stores our files and backups. Some of these providers are outside the UK; such transfers are covered by the UK International Data Transfer Addendum or equivalent safeguards.

Your choices and rights

See your data: email [email protected] and we will send you what we hold.
Deletion: email [email protected] and tell us the Chess.com username. We will delete anything we hold within 30 days and confirm in writing, apart from purchase records we must keep for 6 years.
You also have the rights to correct your data, object to or restrict its use, and to complain to the UK Information Commissioner's Office at ico.org.uk.

Children

ChessStory is not aimed at children under 13. Parents can order a poster of their child's public games.

Changes

If we change the data we keep, we will change this page first, and tell you if it affects an order you have already made.