♞ OmegleChess — Privacy Policy

Version 1.0 — effective July 9, 2026 · omeglechess.com · GDPR (EU 2016/679)

The short version: your camera and microphone go directly to your opponent (encrypted, peer-to-peer) — our servers never see or record them. The only camera image we ever store is a single snapshot taken when a player reports their opponent, kept as moderation evidence. We keep minimal account and game data, and you can delete your account yourself at any time.

1. Who is responsible

The data controller is the operator of OmegleChess (omeglechess.com). Contact for all privacy matters: contact@omeglechess.com. The service is hosted on a server in the European Union (Hostinger, France).

2. What we collect, why, and for how long

Data	Purpose · legal basis	Retention
Account: username, sign-in identity (Google / Lichess ID), e-mail & avatar if provided by the provider, chosen country, Elo rating, peer karma (👍/👎 counts), terms-acceptance timestamp	Provide the service, rankings · contract	Until you delete your account
Guest accounts: temporary pseudonym (Guest#####), rating	Play without registering · contract	Deleted after 30 days of inactivity if no game was played
Games: moves, result, players, time	History, ratings, fair play · contract	Kept; anonymized when you delete your account
Connection journal: pseudonym, date/time, duration, country (derived from your IP, which itself is not stored in the journal)	Security, anti-abuse, usage statistics · legitimate interest	90 days
IP → country cache: IP address and country code only	Deriving the country above (via ip-api.com) · legitimate interest	30 days
Reports: reporter and reported pseudonyms, reason, free-text detail, and a single camera snapshot of the reported player captured at the moment of the report	Moderation, user safety · legitimate interest	Open reports until handled; handled reports 90 days
Planned sessions (peak planner): the hour slots you pledge to play in	Let players coordinate play times · contract	Deleted as soon as the hour has passed (max 24h)
Session cookie (connect.sid, essential)	Keep you signed in · contract	30 days
Local preferences (camera size, terms box) in your browser's localStorage	Comfort · legitimate interest	Until you clear your browser data

3. Camera and microphone

The camera is mandatory to play; your browser asks for your explicit permission before it turns on.
Audio/video flows peer-to-peer between you and your opponent, end-to-end encrypted (WebRTC/DTLS-SRTP). Our servers — including our TURN relay — only ever carry encrypted packets they cannot read, and nothing is recorded.
The only exception: when a player presses ⚠ Report, their device captures one snapshot of the reported player's camera and sends it to us as evidence. Human moderators review it; it is deleted with the report (see table).
We never watch live cameras.

4. Voice captions (🎙 CC)

The optional voice-caption feature uses your browser's built-in speech recognition (Web Speech API). When enabled, your microphone audio is processed by your browser vendor's speech service (e.g. Google for Chrome, Apple for Safari) under their own privacy policies. The resulting text appears in the game chat, marked as a transcript. The feature is off by default.

5. Third parties

Google / Lichess sign-in — authentication only; we receive your public identity (never your password).
ip-api.com — converts your IP address to a country code for the statistics above.
Google Fonts — the Montserrat typeface is loaded from Google's servers.
Browser speech service — only if you enable voice captions (see §4).
We do not use advertising, tracking pixels, or analytics services, and we never sell data.

6. Your rights (GDPR)

Access / rectification — your username and country are editable in your profile; for anything else, e-mail us.
Erasure — use "Delete my account" in your profile: your account and linked sign-ins are removed immediately and your games are anonymized. Or e-mail us.
Portability, restriction, objection — e-mail us and we will answer within 30 days.
You may lodge a complaint with your supervisory authority (in France: CNIL, cnil.fr).

7. Age

OmegleChess is restricted to users 18 years or older. We do not knowingly process minors' data; suspected minors' accounts are removed (see the Terms).

8. Security

HTTPS everywhere, encrypted peer-to-peer media, hashed passwords (legacy accounts), session rotation on sign-in, CSRF protection, and minimal data collection by design. No system is perfectly secure; report any concern to the contact above.

9. Changes

We may update this policy; the version date above changes and significant updates are announced on the site.