KarpaChess
Back to KarpaChess

KarpaChess Privacy Policy

Last updated: 11 October 2026

KarpaChess is a chess-learning app for iPhone, iPad and Android, published by Mourad Ghafiri (“we”). This policy covers the app and this website, karpachess.com. It says what happens to your information when you use them.

In short: the KarpaChess app collects no personal data, and nothing you do in it is sent to us or to anyone else. This website sets no cookies of its own and has no analytics, ads or trackers. The only personal data involved are the technical logs our web host keeps when you visit, and anything you choose to send us.

Who is responsible

Mourad Ghafiri, a private individual, publishes the app and this website and is responsible (the “data controller”) for the little personal data described below. You can reach him at contact@karpachess.com.

The KarpaChess app

What we collect

Nothing. KarpaChess has:

The app never connects to the internet. There is no server for it to send anything to.

What the app keeps on your device

To work, the app stores these in its own private storage on your device:

None of this leaves your device through the app. It is not shared with anyone, and we cannot see it.

Your device’s own backups may include it: iCloud or Finder backups on iPhone and iPad, and Android’s backup service. Apple or Google handle those backups under your account, and we have no access to them. You control them in your device’s settings.

Pictures and files

When you choose a picture for your player profile or for a Studio player, the app opens your device’s photo picker. It copies only the picture you pick into its own storage. It does not read the rest of your photo library, and it never uses the camera.

When you import a game into the Studio, the app reads only the file you choose or the text you paste.

Deleting your data

The app never sends us your data, so there is nothing from it for us to access, correct, export or delete on your behalf. You can still write to us with any question (see Contact below).

This website

No cookies, no tracking

Our pages set no cookies and store nothing on your device. They have no analytics, no advertising, no social-media buttons and no embedded content from other websites. Fonts, images and scripts are all served from karpachess.com itself, so opening a page sends nothing to Google or to any other third party. That is why there is no cookie banner: there is nothing to consent to.

The one exception comes from our host’s security systems, not from our pages. To tell people from automated traffic, Cloudflare adds a small script to the pages it serves, and it may store two cookies in your browser: cf_clearance, which records the result of that check, and __cf_bm, which expires after 30 minutes without activity. Cloudflare describes them as strictly necessary to protect the site. They are used only for that, never for advertising, and never to follow you from one website to another. The CNIL, France’s data protection authority, treats cookies used only to secure a website as needing no consent, which is why we tell you about them here instead of asking.

Server logs kept by our host

Whenever your browser asks for a page, the server automatically receives some technical information. Our host, Cloudflare, Inc. (United States), receives your IP address, the date and time, the page asked for, your browser’s user agent and the page you came from. Cloudflare processes this on our behalf, as our processor, to deliver the site and protect it from abuse and attacks. We do not use it to identify, follow or profile you, and we do not combine it with any other data.

The download button links to Apple’s App Store, and other links lead to sites such as GitHub. Nothing is loaded from another site until you follow a link to it. Once you are there, that site’s own privacy policy applies.

When you contact us

If you write to contact@karpachess.com, we receive your email address, your name if you include it, and your message. We use them only to reply to you, based on our legitimate interest in answering your message (GDPR Article 6(1)(f)). The message passes through Cloudflare’s email routing and is stored by our mailbox provider on our behalf. We keep a conversation only as long as we need it to handle your request, and delete it no later than 12 months after our last exchange, unless the law requires us to keep it longer. Please do not send us sensitive information by email.

If you report a problem on GitHub instead, your report is public and is handled under GitHub’s privacy statement.

Sharing and transfers

We do not sell, rent or share personal data. We do not use it for advertising or profiling, and no automated decisions are made about you. The only recipients are the service providers described above, for hosting and email, which act on our instructions.

Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, United States) is based in the United States and runs servers around the world, so server logs may be processed outside your country. For data leaving the European Economic Area, the United Kingdom or Switzerland, Cloudflare relies on its certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, with the European Commission’s standard contractual clauses as a fallback.

Your rights

Wherever you live, you can ask us what personal data we hold about you, and ask us to correct or delete it. Email contact@karpachess.com and we will reply within one month. We hold almost nothing: the app sends us no data, and server logs do not identify you by name. So tell us what you are looking for, and we will help as far as we can.

Europe and the United Kingdom (GDPR)

If you are in the European Union, the European Economic Area or the United Kingdom, you have the right to access your data, to have it corrected or erased, to restrict its use, to object to its use (including use based on our legitimate interest), and to receive it in a portable format. You can also complain to your data protection authority. In France, this is the CNIL (cnil.fr). French residents can also tell us what should happen to their data after their death.

United States

We do not sell or share personal information, and we do not use it for targeted advertising. Because this site does no tracking at all, it behaves the same whether or not your browser sends a “Do Not Track” or Global Privacy Control signal: there is nothing to switch off. No third party collects information about your activity across websites through this site, or through the app.

China

If you are in mainland China, the Personal Information Protection Law gives you the right to know about and decide on the processing of your personal information, to restrict or refuse it, to access, copy, correct or delete it, and to ask us to explain these rules. The processing outside China is the one described above: Cloudflare (whose name, address, role and purpose are given in Sharing and transfers) handles server logs and email routing for us. To use your rights, for data held by us or by Cloudflare, write to the address below.

Children

KarpaChess is suitable for all ages. The app collects no data from anyone, children included. The website is designed for a general audience and asks no one for any information. Its server logs are used only to deliver and secure the site, never to contact, profile or advertise to anyone, and we do not knowingly collect personal information from children. If you believe a child has written to us, a parent or guardian can ask us to delete the message, and we will.

Changes to this policy

If this policy changes, the new version will be published at this same address with a new date at the top.

Contact