Privacy Policy – Chess Master vs AI

Effective Date: September 24, 2026

Welcome to Chess Master vs AI ("the App"), developed by VirtualBox Development ("we", "us", or "our", vbdev.ro). This Privacy Policy applies to our mobile application on Android (ro.vbdev.chess) and iOS (ro.vbdev.chess). Your privacy is important to us. This Privacy Policy explains how our App handles local gameplay data, device permissions, advertising, analytics, and crash reporting.

1. Overview, No Account & No Backend Server

Chess Master vs AI is an offline chess game that you can play solo against a computer opponent (the Stockfish chess engine, which runs entirely on your device) at several difficulty levels, or with two players on the same device. No moves or games are sent over the network.

The App operates without user registration or logins. We do not operate any backend servers for user accounts or gameplay profiles, and we do not collect, receive, store, or sell any personal data on our own servers.

2. On-Device Storage & Local Gameplay Data

All gameplay progress and user configurations are stored strictly locally on your device in private app storage:

  • Stored Information: Game scores and match statistics (such as wins, losses, and draws) and user preferences (such as sound on/off settings).
  • Strictly Local: This data is never transmitted to us or any third parties.
  • User Control & Deletion: You can reset your game scores at any time from within the App. In addition, clearing the App's data in your device system settings or uninstalling the App permanently and immediately deletes all locally stored data.

3. Device Permissions & Hardware Access

Chess Master vs AI requests minimal device permissions necessary to load advertisements and log stability diagnostics:

  • Internet Access: Used solely by third-party SDKs (Google Mobile Ads and Firebase) to fetch banner ads, log analytics events, and send crash diagnostics.
  • Network State Access: Used to check whether an active network connection exists before attempting network requests.
  • No Sensitive Permissions: The App does not request access to your precise or approximate location, camera, microphone, photo library, storage files, contacts, or phone sensor data.

4. Advertising (Google AdMob)

The App displays banner advertisements powered by Google AdMob (Google Mobile Ads SDK):

  • Data Processed by Google: Google may collect information including your device advertising identifier (Android Advertising ID / AAID or Apple Identifier for Advertisers / IDFA if permitted), IP address, device and app technical specifications, and ad interaction data (such as views and clicks) to serve, measure, and—subject to your consent—personalise ads.
  • No Sale of Personal Data: We do not sell personal data to advertisers or third parties.
  • Google Privacy Policies: To learn more about how Google handles advertising data, please review How Google uses information from sites or apps that use our services and Google's Privacy Policy.

5. Analytics & Crash Reporting (Google Firebase)

The App uses (or will shortly integrate) Google Firebase Analytics and Google Firebase Crashlytics to monitor application performance and stability:

  • Google Firebase Analytics: Collects pseudonymous app instance IDs, usage events (such as game screens opened, difficulty levels selected, and matches played), device model, OS version, app version, and geographic country/region derived from IP address. This data helps us understand general gameplay trends and improve user experience.
  • Google Firebase Crashlytics: Collects crash stack traces, device state metrics (such as orientation, free RAM, and disk space), operating system and app version, and a randomly generated Crashlytics installation UUID. This enables us to identify, prioritize, and fix crashes and technical issues.
  • Data Processor: These services are processed by Google LLC / Google Ireland Limited under the Firebase terms. For details, consult the Firebase Privacy and Security Documentation.
  • Data Retention: According to official Firebase documentation (firebase.google.com/support/privacy), Firebase Crashlytics retains crash stack traces, extracted minidump data, and associated identifiers (including Crashlytics Installation UUIDs and Firebase installation IDs) for 90 days before starting the removal process from live and backup systems. Analytics data is retained according to standard Google Analytics retention periods.

6. Consent Management & User Controls

We provide transparent user controls regarding privacy, tracking, and advertising choices:

  • EEA, UK, and Switzerland Consent (UMP CMP): Users located in the European Economic Area, the United Kingdom, and Switzerland are presented with a consent form powered by Google's User Messaging Platform (UMP), an IAB TCF certified Consent Management Platform (CMP). Personalised ads and analytics are only loaded if you provide consent. If you decline consent, non-personalised or limited ads are displayed.
  • Changing Privacy Choices: You can review, update, or withdraw your consent at any time via "Privacy settings" in the App's main menu.
  • iOS App Tracking Transparency (ATT): On iOS devices, the App displays the native App Tracking Transparency prompt. The IDFA identifier is only accessed if you explicitly grant permission by selecting "Allow". If you select "Ask App not to Track", ad personalisation is disabled.

7. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA) or UK, our processing of data relies on the following legal bases under the General Data Protection Regulation (GDPR):

  • Consent (Art. 6(1)(a) GDPR): For personalised advertising and non-essential analytics where required by applicable law. You may withdraw consent at any time via the in-app "Privacy settings".
  • Legitimate Interests (Art. 6(1)(f) GDPR): For delivering non-personalised advertisements to support free development, maintaining app security, preventing fraud, and collecting crash reports via Crashlytics to diagnose defects and ensure app reliability.

8. GDPR Data Protection Rights

Under the GDPR and applicable data protection regulations, you have several rights regarding your personal information:

  • Right of Access & Rectification: You can request confirmation of whether personal data is processed and obtain copies or corrections.
  • Right to Erasure & Restriction: You have the right to request deletion of your personal data or restriction of its processing.
  • Right to Object & Portability: You can object to processing based on legitimate interest and request the transfer of your data where applicable.
  • Right to Withdraw Consent: You have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
  • Local Data Control: Because VirtualBox Development does not operate a user database or store personal data on remote servers, all local gameplay data can be deleted directly by resetting scores within the app or uninstalling the app.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory data protection authority. For users in Romania, the supervisory authority is:
    Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
    B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, cod poștal 010336, București, România
    Website: https://www.dataprotection.ro

9. International Data Transfers

Data collected by third-party SDKs (Google LLC and its subsidiaries) may be transferred to, stored, and processed in the United States and other countries where Google operates. These transfers are governed by appropriate safeguards, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.

10. Children's Privacy

Chess Master vs AI is a general-audience game and is not directed at children under the age of 13 (or under 16 for individuals residing in the European Economic Area). We do not knowingly collect personal data from children. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us at contact@vbdev.ro so we can take immediate steps to delete such data.

11. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our practices or regulatory requirements. Any modifications will be posted directly on this page (https://vbdev.ro/chess-master-privacy-policy) with an updated effective date.

12. Contact Us

If you have questions, feedback, or data privacy requests concerning Chess Master vs AI, please reach out to us:

Developer: VirtualBox Development

Email: contact@vbdev.ro

Website: https://vbdev.ro