Data collection for anyone using the Unranked Chess Android app can be divided into two categories:
When a user creates an account with Unranked Chess, they are asked for:
Passwords are obfuscated using SHA-256 encryption. All traffic between a client device and the app server is encrypted using HTTPS.
The app allows for users to delete their account on the "My account" page in the app, which is accessible after logging in.
In order to delete an account, the app requires a user's password. Upon account deletion, a user's e-mail address, user name, as well their encrypted password
are removed from the app server and cannot be recovered. No records of these data points are kept anywhere else but in the app server's internal database.
If a user has lost their password, they can use the "Reset my password" option on the log-in screen of the app.
When a user plays chess games using the app, the app records their chess moves, as well as:
The reason that Unranked Chess retains a user's IP address is merely to be able to flag potentially malicious behavior, such as
an automated program making repeated requests to the app server merely to disrupt its normal operation.
The version of an app installation is used to determine the respective proportions of the user base on different versions of the app, and with
that the impact of a "forced upgrade" scenario - showing a message in the app prompting the user to update their app installation.
Crash logs as well as ANR logs are sent to Firebase Crashlytics and are used to flag and fix app misbehavior.
No user information is included with crash or ANR logs.