Privacy Policy

Last updated: August 21, 2026

This Privacy Policy explains how Tripster LLC ("we", "us") collects, uses, and protects information when you use TacticsChess (the "Service") at tacticschess.com.

1. Information we collect

• Account information — the email address and password you provide when you sign up. Passwords are stored only as a salted bcrypt hash; we never store your password in plain text.
• Usage data — your puzzle progress (which puzzles you have solved and how many times) so we can personalize and track your training.
• Authentication data — a session token stored in a secure, HttpOnly cookie to keep you signed in, plus account timestamps (sign-up date, email-verification date).
• Payment information (if you subscribe) — paid subscriptions are processed by our payment provider, Square. Card details are entered directly into Square and are never received or stored by us; we retain only a subscription/customer reference and the dates of your premium access.

2. How we use information

• To create and secure your account and keep you signed in.
• To send transactional emails (email verification and password reset) via Amazon SES.
• To provide, personalize, and track your puzzle-solving progress.
• To process and manage paid subscriptions, if you choose to purchase one.

We send only transactional email related to your account and the Service. We do not sell your personal information.

3. Service providers

We share limited information with providers that operate the Service on our behalf:

• Amazon Web Services (Amazon SES) — to deliver account emails.
• Square — to process subscription payments. See Square's privacy policy for how they handle payment data.
• Google (Google Ads) — to measure the effectiveness of our advertising. See section 4.

4. Cookies

We use a single essential, HttpOnly authentication cookie to maintain your signed-in session.

We also run the Google Ads tag on this site to measure how well our advertising works — for example, whether someone who clicked an ad went on to create an account. It sets Google advertising cookies in your browser and shares limited information with Google for conversion measurement and remarketing. See how Google uses information from sites that use its services. You can opt out of personalized advertising through Google Ads Settings, or block the tag with any standard ad or tracker blocker; the Service works normally either way.

5. Data retention & security

We retain account data for as long as your account exists. Passwords are hashed with bcrypt and transmitted over encrypted connections. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

6. Your rights

You may request access to, correction of, or deletion of your account data by contacting us at support@tacticschess.com. If you are in the EU/EEA or California, you may have additional rights under the GDPR or CCPA — including the right to access, correct, delete, or port your data and to object to or restrict certain processing. To exercise any of these rights, email us at support@tacticschess.com and we will respond within the timeframes required by law. We will not discriminate against you for exercising your rights, and we do not sell your personal information. EU/EEA users also have the right to lodge a complaint with their local data protection authority.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect information from them.

8. Changes

We may update this policy from time to time; the "Last updated" date above reflects the latest version.

9. Contact

Tripster LLC
13300 Bothell Everett Hwy
Ste 303 #329
Mill Creek, WA 98012
support@tacticschess.com