Privacy

Chess Galaxy has no accounts, no tracking cookies and no database. Your games are fetched from public chess APIs straight into your browser and analysed there. This page says exactly what that leaves behind.

What happens in your browser

Every tool on this site runs entirely on your device. When you enter a username, your browser talks directly to Lichess or Chess.com and receives the public games. Nothing is sent to a server belonging to this site, and nothing about those games is stored anywhere outside your own browser.

The chess engine is Stockfish, compiled to WebAssembly. It runs in a background thread of your browser tab. No position you analyse leaves your device.

What is stored on your device

The site uses your browser's local storage to remember settings so you do not have to type them again — the username you last entered, the platform, the colour and the filters, and whether the sidebar is collapsed. This never leaves your device, and clearing your browser data removes it.

Play patterns stores more, because it has to. To read two years of an account's games it downloads that account's public monthly archives, and it keeps them in a database inside your browser (IndexedDB, named chessgalaxy.trust) so that looking at the same account again does not download the same megabytes twice. Note that these are the games of the account you looked up, which may not be your own — they are public games, and they stay on your device.

The Training plan uses the same database for one thing: the engine's verdict on individual positions. It stores no games there. Both tools share those verdicts on purpose — a position one of them has already worked out does not have to be computed again by the other.

Entries in that database are deleted automatically after 30 days. Both pages carry an Erase the local cache button that removes all of them immediately, whichever of the two put them there.

There are no cookies and no advertising identifiers.

Hosting

The site is hosted on Cloudflare Pages. Like every web server, Cloudflare processes the technical data needed to deliver a page: your IP address, the requested address, the time, and the browser and operating system you use. This is necessary to serve the site and to keep it available and secure. Cloudflare is contractually bound as a processor.

Traffic measurement

To see which pages get used, the site includes Plausible Analytics, hosted in the European Union. It is deliberately chosen because it works without cookies and without any access to storage on your device.

Plausible does not store your IP address. It receives it once in order to derive a country and a daily changing, salted hash that distinguishes a returning visit within the same day. Neither the address nor the hash is kept, and the hash cannot be traced back to you or linked across days. No profile is built, and nothing is shared with third parties.

What is recorded is the page visited, the referring site, rough device class and country, plus a few anonymous events that say how far a tool was used: a galaxy was created, a game review was started and finished, a play-pattern check was started and finished. Never a username — neither yours nor that of an account you looked up — and never your games, your moves or any other content. The only numbers sent are coarse ranges, for example “between 80 and 120 moves”, never an exact count.

The measurement script itself is served from this site, not from a third party, so no outside code runs on this page. The measurement it sends goes to Plausible directly, which means Plausible sees the connection and with it your IP address — for the one purpose described above, and without storing it.

Other sites you reach from here

Some features load data from other providers, and those providers see your IP address when they do:

• Lichess and Chess.com — your games, and the cloud evaluation shown for a selected position.

The opening name database used to be fetched from GitHub on every visit, which showed your IP address to GitHub. It is now served from this site, so that request no longer happens.

Links that leave this site are marked as such. No referrer is sent with them.

Your rights

You can ask what data relating to you is processed, and ask for it to be corrected, erased or restricted. You can object to processing, and you can lodge a complaint with a data protection supervisory authority.

In practice there is very little to ask for: this site keeps no account, no profile and no record of who you are. A request about the server logs is best directed at the host.

Contact

Questions about this page, or about data protection generally, go to ChessGalaxy@proton.me. Anything else about the site belongs on the feedback page.

Last updated 11 August 2026.