Privacy Policy

Last updated: 29 May 2026

This policy explains how Chess Detective ("we", "us") handles personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").

1. What we collect

When a parent or guardian creates an account for a child, we may collect:

• the parent or guardian's email address;
• a username chosen for the child;
• an account password, stored as a one-way cryptographic hash;
• gameplay progress, such as level, XP, and puzzle history.

We may also collect limited technical information needed to run and secure the app, such as basic device or app error information.

2. Why we collect it

We use this information to:

• create and manage accounts;
• authenticate users;
• save and sync gameplay progress;
• operate, maintain, and improve the app;
• respond to support and data requests.

We do not use personal data for advertising or direct marketing.

3. Sharing and storage

We do not sell or rent personal data. We may use service providers such as cloud hosting or other technical providers to store or process data on our behalf, and they are only allowed to use it to provide services to us.

Your data may be stored outside Hong Kong, depending on the location of our service providers.

4. Retention

We keep personal data only for as long as needed to provide the app and for related business, legal, or security purposes. We may delete inactive accounts after 12 months unless we need to keep the data for legal reasons.

5. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.

6. Access and correction

Under the PDPO, you may request access to, or correction of, personal data we hold about you or your child. We may need to verify your identity before processing a request.

7. Contact

To make an access or correction request, or to request deletion of your account, please email us at info.chessdetective@gmail.com. We will respond within 40 days as required by the PDPO.