Cookie Notice
Effective Date: [FILL IN BEFORE PUBLISHING]
Last Updated: [FILL IN BEFORE PUBLISHING]
This Cookie Notice explains what cookies and similar technologies Coachess (operated by Coachess SRL) uses on the website at coachess.org, what they do, and what your choices are. It complements our Privacy Policy and Terms of Service.
Short Version
Coachess uses only strictly necessary cookies — the minimum required to sign you in and keep you signed in. We do not use advertising cookies, cross-site tracking, or third-party analytics cookies. Our usage analytics is provided by a self-hosted, cookieless Umami instance.
Because we do not use any optional or non-essential cookies, we do not show a cookie consent banner. EU law (the ePrivacy Directive and Article 5(3) of the 2002/58/EC Directive) requires consent only for cookies that are not strictly necessary for the service you explicitly requested.
What is a cookie?
A cookie is a small text file a website places in your browser to remember information across page loads. Cookies can be set either by the site you are visiting (first-party cookies) or by a different site whose content is embedded in the page you are visiting (third-party cookies). Coachess currently uses only first-party cookies.
Cookies We Use
All of the following are first-party cookies set directly by coachess.org and are strictly necessary for the Service to function.
| Name | Purpose | Duration |
|---|---|---|
| authjs.session-token | Keeps you signed in between visits. Contains only a random session identifier — no personal data. The actual session is stored server-side in our database. | 30 days |
| authjs.csrf-token | Protects against cross-site request forgery during sign-in. | Session |
| authjs.callback-url | Remembers where you were trying to go before you signed in, so we can redirect you back after authentication. | Session |
| authjs.pkce.code_verifier | Short-lived cookie used only during the Google Sign-In flow for PKCE (Proof Key for Code Exchange) security. | 15 min |
Cookie names may be prefixed with __Secure- or __Host- depending on your browser and connection.
Analytics (Cookieless)
We use a self-hosted instance of Umami to understand aggregate traffic to the Service — page views, referring sites, broad device category. Umami is configured to be cookieless: it does not set any cookie on your browser, and it does not fingerprint or track you across sites. No personal data (such as your name, email, or IP address) is stored in analytics.
Umami data stays on our own servers in the European Union. It is never shared with third parties.
Third-Party Cookies
Coachess does not embed third-party advertising networks, social media widgets, or tracking pixels. Consequently there are no third-party cookies set on coachess.org itself.
When you sign in with Google, Google's own sign-in page (on accounts.google.com) may set cookies on its own domain, subject to Google's Privacy Policy. Those cookies are not set by Coachess and we have no control over them.
How to Control Cookies
You can block or delete cookies through your browser settings. Every modern browser lets you view, delete, and block cookies on a per-site basis. Instructions for the most common browsers:
Heads up: If you block the strictly necessary cookies listed in Section 3, you will not be able to sign in to Coachess, and features that require an Account (lessons, game diagnosis, training) will not work. The cookies listed are the minimum required to deliver the Service you explicitly requested when you created an Account.
Changes to This Cookie Notice
If we change how we use cookies — for example, if we introduce a non-essential cookie in the future — we will update this Cookie Notice and, where required by law, ask for your consent before setting the new cookie. The “Last Updated” date at the top of this page reflects the most recent revision.
Contact
If you have any questions about how we use cookies, contact us at:
Coachess SRL
[FILL IN REGISTERED ADDRESS]
Romania
Email: privacy@coachess.org
“Four cookies. All necessary. No tracking, no advertising, no nonsense. If I wanted to follow you around the internet, I would do it with a grandmaster's intuition, not with JavaScript.”
— Boris Shakhmatinskiy, Grandmaster