--- title: "Privacy policy | Chess Goat" description: "What Chess Goat stores and why: your email for reports, your chess.com username, course progress, and what the ChatGPT and Claude apps receive. We never sell your data." canonical: "https://trychessgoat.com/privacy/" last_updated: 2026-11-04 --- [![Chess Goat logo](https://trychessgoat.com/favicon.svg)Chess Goat](https://trychessgoat.com/) # Privacy Last updated November 2, 2026 **In short.** Chess Goat stores your email address, your chess.com username, your public chess.com game data and the report built from it. Chess Goat doesn’t sell your data and doesn’t send marketing email. Payments are handled by Stripe, and Chess Goat never sees or stores your card number. To delete your data, email [hello@trychessgoat.com](mailto:hello@trychessgoat.com) from the address you paid with. The details are below. ## What does Chess Goat store? - Your email address, to send you your report. - Your chess.com username, to know which games to analyze. - Your public game data from chess.com’s public API, and the report we build from it. No account, no password. ## What happens when you open a free card? Free card: when you enter a chess.com username we fetch that player’s public chess.com profile and recent games, and keep them in Cloudflare’s cache for up to 6 hours. Nothing is stored beyond that. Email [hello@trychessgoat.com](mailto:hello@trychessgoat.com) to have a username blocked from cards. ## How does Chess Goat in ChatGPT and Claude use your data? When you use the Chess Goat app in ChatGPT, or the Chess Goat connector or plugin in Claude (claude.ai, Claude Desktop or Claude Code), the assistant sends us only the chess.com username you ask about (and, if given, a time zone and filters such as a time control). We use it to fetch that player’s public chess.com games, the same as the free card, and we count how often each tool is used. We don’t receive your full conversation or your ChatGPT or Claude account details. If you connect Chess Goat, you sign in on our website with the email you bought with (your existing sign-in, or a 6-digit code we email you; we store only a hash of the code, for 10 minutes), or enter a report's private link. When we deliver a report we record which reports an email bought, keyed by a one-way hash of the email, so a signed-in buyer's reports are found without the link. We store that report connection and hashed authorization tokens so the plugin can retrieve the same report in future chats. Access tokens last one hour and the connection renews during use, with refresh access expiring after a year without renewal. You can disconnect it in ChatGPT or Claude, or ask us to revoke it. Report content is sent to the assistant only through the authorized connection. Anyone with your unlisted report link can view and connect that report. If you connect your Goat Pass, you sign in on our website (with your existing sign-in, or a 6-digit code we email to your Goat Pass address; we store only a hash of the code, for 10 minutes). The plugin can then open every lesson and read and update your course progress, the same record the website syncs, so lessons you finish in ChatGPT or Claude appear on the site. We check with Stripe that your Pass is still active. When you ask for lessons based on your games, we read your public chess.com games, the same as the free card. ## Chess Goat in ChatGPT and Claude: at a glance **What we receive.** The chess.com username you ask about and optional filters; lesson choices and the puzzle results you play; if you connect, the email you sign in with (or a report link you enter on our website). We do not receive your conversation history or your ChatGPT or Claude account details. **Why.** To read public chess.com games, pick and teach lessons, save your course progress, find the Goat Reports you bought, and count how often each tool is used. **Who it goes to.** OpenAI (ChatGPT) or Anthropic (Claude), whichever assistant you use, which shows our answers to you; Cloudflare, which hosts our service and stores connection and progress records; Stripe, to check that a Goat Pass is active; chess.com, whose public API we read for game data; PostHog, for anonymous tool-usage counts. We do not sell your data. **How long we keep it.** Email sign-in codes: 10 minutes, stored only as a hash. Sign-in attempts: 10 minutes. Access tokens: 1 hour. A connection: until you disconnect, or one year after it was last used. Course progress and the list of reports bought with an email (keyed by a one-way hash of the email): until you ask us to delete them. Public chess.com data: cached for up to 6 hours. **Your controls.** Disconnect Chess Goat in ChatGPT or Claude at any time, which stops all access. Email [hello@trychessgoat.com](mailto:hello@trychessgoat.com) to revoke a connection, or to see or delete your progress, report list or account data. ## What does the Chess Goat Chrome extension collect? If you don’t sign in, nothing. The extension ([Chess Goat on the Chrome Web Store](https://chromewebstore.google.com/detail/chess-goat-free-stockfish/gfijilhhkimjjfndcmkmjfmadhofgkdo)) reviews a finished chess.com game in Chrome’s side panel. It reads the address of the chess.com tab you have open to find the game, then your browser asks chess.com directly for that game’s details and moves (www.chess.com and api.chess.com). Stockfish runs on your computer. Without an account the extension sends nothing to Chess Goat and has no analytics or tracking; it keeps your settings and recent engine results in your browser only. Links in the panel to trychessgoat.com are ordinary links: if you open one, this website’s policy applies. If you sign in to compare games with your history, the extension stores a sign-in token in your browser and asks trychessgoat.com for the mistake history of the chess.com account you linked. If you also turn on “Keep my history up to date”, it analyses your new finished games on your computer and sends us a short record of each one: the game’s address and end time, how many moves you made, and for each serious mistake the position, the move you played, Stockfish’s move, how much it cost and what kind of mistake it was. It sends nothing about other players and nothing while a game is in progress. Drill progress stays in your browser. ## What is stored for a Chess Goat account? Signing in at trychessgoat.com/account uses an email link, no password. We store which chess.com usernames are linked to your account (under a one-way hash of your email, never the email itself) and your mistake history: the history from your report, if you bought one, plus the records the extension sends. Linking a username you didn’t buy a report for needs a short code in that chess.com profile, so only its owner can link it. We use your email only for the sign-in links you ask for. To delete your account and history, email [hello@trychessgoat.com](mailto:hello@trychessgoat.com) from that address. ## What analytics does Chess Goat use? We use Google Analytics and PostHog to count visits and see which pages people use, for example how many visitors open a sample report, start checkout or finish paying, and to catch errors on the site. Both set cookies and receive your IP address and browser details. PostHog also gets an anonymous id that follows one visit from the “Get report” button through Stripe checkout, so we can see where people drop off. We never send either of them your email. PostHog (not Google Analytics) gets the chess.com username a page is about, such as the card or lessons you open, and the username you enter as your own, so we can see which cards and lessons get used and whether a visitor came from a person or a search crawler. We strip usernames out of page addresses sent to Google Analytics and PostHog, and we don’t record your screen. You can block both with any ad blocker, or Google Analytics with Google’s [opt-out add-on](https://tools.google.com/dlpage/gaoptout). ## What is stored for Goat Pass and lessons? Your lesson progress, puzzle rating and review queue are stored in your browser (localStorage), not on our servers. If you subscribe, Stripe holds your email and subscription; we set one sign-in cookie that carries your email and Stripe customer id, signed so it can’t be forged. We use your email only to send sign-in links you ask for and receipts. ## Who handles payments? Payments are handled by Stripe. We never see or store your card number. Stripe’s own privacy policy covers the payment data it processes. ## How are free Goat Cards handled? Goat Cards at trychessgoat.com/u/… are built only from public chess.com data (game results and clocks). We don’t store them beyond a short cache. Cards of titled players (GM, IM, FM and the women’s titles) that were opened recently may be listed on our homepage: name, title, card type and rating, never who looked or when. Cards are hidden from search engines unless the player claims theirs by putting a code in their own chess.com profile. To have a card removed, email [hello@trychessgoat.com](mailto:hello@trychessgoat.com). ## Who can see your report? Your report sits at an unlisted link that we email only to you. Anyone you share the link with can open it. ## What doesn’t Chess Goat do? We don’t sell your data and we don’t send marketing email. We only email you about your report. ## How do I delete my data? Email [hello@trychessgoat.com](mailto:hello@trychessgoat.com) from the address you paid with and we’ll delete your email, username, report, course progress and ChatGPT or Claude connections. [Home](https://trychessgoat.com/)[About](https://trychessgoat.com/about/)[Contact](https://trychessgoat.com/contact/)[Developers](https://trychessgoat.com/developers/)[Discord](https://discord.gg/cD5f2DqTtN)[Terms](https://trychessgoat.com/terms/)[Privacy](https://trychessgoat.com/privacy/)[Refunds](https://trychessgoat.com/refunds/)[hello@trychessgoat.com](mailto:hello@trychessgoat.com)