Skip to content
LUFT.
Legal

Privacy policy.

Last updated

Luft is lufthq.com and the Luft companion extension for Chrome. This page says what we collect, why, where it goes and how to get rid of it. "We" means Luft and the people who run it.

Short version

  • We keep what Luft needs to work: your email, your chess.com username, your limits and your study progress.
  • We don't sell your data, show ads or track you across other sites.
  • Analysis runs in your browser. Your games aren't sent anywhere to be analyzed.
  • You can export everything or delete your account any time.

What we collect

  • Your account. Your email address, to sign you in. If you sign in with Google, the name and profile picture Google shares. Your settings: theme, skin, the analytics switch and small layout choices.
  • Your chess.com link. The username you link, its public name, avatar and country, a verification code, and when you verified it.
  • Limits and counts. Your daily limits per time control and how many games (or daily moves) you played each day, once the companion extension syncs them.
  • Study progress. Lines learned and practiced, game reviews, the analysis of your games (engine scores, the opening, where you first slipped), puzzle attempts and your puzzle rating, objectives, streaks, points and achievements.
  • Plan and access. Your plan, free access we gave you or a promo code you used, and which reviews and puzzles counted toward Free's limits.
  • Shared boards. Boards you create or join: the board's name, the name you use there, your moves, and when you were last there. Finished games keep both players' names and the moves.
  • Guests. Joining a shared board without an account makes a temporary guest login. We keep the name you type and your moves on that board, nothing else.
  • Feedback. What you write, the page you were on, the app version, your theme and screen size, the last few error messages, a screenshot if you attach one, and, if you attach it, a debug log of your recent taps, clicks and navigation keys in Luft (never what you type).
  • Waitlist. Your email, where you signed up from, and a note if you add one.

What we don't

  • Your chess.com password. Luft never asks for it.
  • Your games themselves. They're public on chess.com and Luft reads them again when it needs them. We keep the review and analysis notes above.
  • Your card number. See Payments below.
  • Anything on chess.com beyond what the companion needs to count your games.

Why

  • To run Luft: sign you in, sync your limits and counts, save your progress, run boards.
  • To keep Free's limits fair and each chess.com username with its real owner.
  • To fix bugs and improve Luft: feedback, error reports, and analytics unless you turn them off.
  • To keep bots and abuse out: rate limits and a bot check.
  • To email you what you asked for: sign-in codes and links, and your invite if you joined the waitlist. No newsletters.

Where it lives, who sees it

  • Supabase hosts the database, sign-in and our server functions, in the US (AWS us-east-1). Each account can read only its own rows and the shared boards it's in.
  • Cloudflare serves the site, forwards mail sent to hello@lufthq.com, and runs Turnstile, a bot check on sign-in and guest joins. Cloudflare sees your IP address and browser for it; we only learn whether it passed.
  • Resend delivers our sign-in emails, so it sees your email address.
  • chess.com. Luft reads chess.com's public data (profiles, ratings, game archives) through our server, so chess.com sees our server, not you. Avatars load from chess.com's image servers, which see your IP address like any image on the web. The companion reads chess.com pages in your browser to count games and asks chess.com for your public game list.
  • Sentry and PostHog, for error reports and analytics, only when switched on. See below.
  • Other people. On a shared board, everyone there sees the name you use, your moves and that you're online. Finished games are visible to both players and the board's host. Nothing else you do on Luft is shown to anyone.

If you live outside the US, your data is stored and processed in the US. We don't sell or rent it, and we don't share it for advertising. We'd hand it over only if the law makes us.

Payments

When paid plans launch, Pro is sold through Stripe (as "Sold through Link", the merchant of record, which also handles sales tax); we never see your card number. To start a checkout we send Stripe your email and account id. We keep your plan, its status, its trial and renewal dates and the ids Stripe gives us.

Cookies and local storage

Luft sets no cookies of its own and runs no ads or cross-site trackers. Your browser's local storage keeps your sign-in session, preferences (theme, skin, board and filter choices, the analytics switch), small caches that make pages load faster, and on a shared board the guest name you typed. Signing out removes the session; clearing the site's data removes the rest.

If you turn on "Keep a debug log on this device" in your account (or open a page with ?debug=1, for that tab only), your browser also keeps your last 5 minutes of taps, clicks and navigation keys in Luft, never what you type. It stays on your device unless you attach it to feedback.

The companion keeps its data in Chrome on your computer: your limits, today's counts and the games it counted, your chess.com username and, once connected, your Luft sign-in. If you use Chrome Sync, your limits travel between your own Chrome installs. Signed in, it sends your daily counts to your account and reads your limits from it. Apart from that and its chess.com requests, nothing leaves your browser.

Error reports and analytics

These run only on app pages, never on public pages like this one, and only when we've switched them on. Both scrub sign-in codes, tokens and email addresses out of everything they send, and identify you only by your account id.

  • Error reports (Sentry). When something breaks: what failed, the page, your browser, the app version and your account id. Some page loads also send timing data. Never your email or name.
  • Usage analytics (PostHog). Only while "Share usage analytics" is on in your account (it starts on; turn it off any time and it stops at once). Page views and a few actions like learning a line, solving a puzzle or sending feedback. Session recordings, when on, hide everything you type and your email. No cookies.

How long we keep it

  • Your account and progress: until you delete your account. Deleting removes the account, every row tied to it and your feedback screenshots, right away.
  • Shared boards: a board closes after 7 days without activity and is deleted 30 days later, moves and members included. Finished games stay visible to the other player and the host, with the names used on that board, even after the board or your account is gone.
  • Guest logins: deleted after 30 days without use.
  • Debug logs attached to feedback: deleted after 90 days, or with your account.
  • Waitlist emails: until you ask us to remove yours.
  • Logs and backups: our providers keep short-lived technical logs (IP address, browser, the request) for security and debugging, and deleted data can stay in database backups for a short time before they roll off.
  • Error reports and analytics: kept by Sentry and PostHog for a limited time under our settings with them.

Your controls

  • Export: "Export my data" on your account page downloads everything your account holds as one JSON file.
  • Delete: "Delete account" on the same page removes it right away.
  • Analytics: turn "Share usage analytics" off there.
  • Anything else (a correction, removing a waitlist email, a question): write to hello@lufthq.com. We answer within 30 days.

Depending on where you live, you may have more rights over your data: to see it, correct it, delete it, take it with you, object to how we use it, or complain to a data protection authority. Write to us and we'll honor them.

Children

Luft isn't for children under 13, and you need to be 13 or older to make an account. If you think a child under 13 has given us data, write to us and we'll delete it.

Changes

When this policy changes, the date at the top changes too. If a change matters (a new kind of data, or a new company that gets it), we'll tell you in the app or by email before it applies.

Contact

Questions about your data: hello@lufthq.com. The terms cover the rest.