Chord Chess Sign in

Imprint and privacy

As of 10/29/2026

Imprint

Information under § 5 ECG and § 25 MedienG (Austria)

Chord Chess is run by

Ortwin Baldauf
Mayerweckstraße 2-8/90/4
1210 Wien
Austria

Contact: webmaster@chordchess.app

Privacy

Chord Chess keeps as little as it can: what it needs so that you can play and find your games again, and a count of visits that does not know who you are. It shows no ads, sets no tracking cookie and loads nothing from other sites.

Who is responsible

The operator named above is responsible for your data. Write to them about anything that concerns it.

Your account

The game keeps the id GitHub or Google gives you (not your password and not your email), the username you choose, the name shown to others, what you write about yourself, your favourite genres, the sound you play with, since when you play, and whether you have closed the tour of the game. It needs them so that you can sign in and play; that is what they are for, and what allows keeping them (Art. 6(1)(b) GDPR).

Your games

For each game the game keeps the names at its seats, the chords placed and when. The others in a game see its names and chords, and a finished game can be heard by anyone who has its link. Names typed in for a game on one device are kept with that game.

Signing in

You sign in with GitHub or Google, which tell the game an id for you and your name. The game asks them for no email and keeps none. What happens at GitHub or Google is up to their own privacy notices.

Cookies and your browser

One cookie keeps you signed in, until 30 days after your last visit; one remembers the page to come back to while you sign in, for 15 minutes; and the provider sets one while you sign in. Your browser keeps your settings (theme, sound, volume, keyboard, chords as notes, triads or sevenths, hints you closed), chords you have not placed yet, and how many games you saw finish, for the question of support; none of that leaves your browser. All of it is needed for the game to work, so there is nothing to agree to.

The server

Chord Chess runs on a server of netcup GmbH in Karlsruhe, Germany, which keeps the data on behalf of the operator. Its logs note errors, without addresses, and are overwritten after a few weeks. The address of your connection is used for a moment only, to limit how much one address may send and to count visits. A copy of the database is made every night and kept for 14 days. The server is watched for its load on the machine itself, and from outside by UptimeRobot, which only asks whether the site answers.

Patreon

The link to Patreon is an ordinary link: Patreon learns nothing until you follow it, and then not which page you came from. On Patreon, its own privacy notice applies.

Deleting

You can delete a game you play alone from the list of your games, and your account at the foot of your profile. The games on your device go with it; in games with others your name stays, so that they stay whole for them. Write to the operator if you want it gone from there as well. The copies of the database are gone after 14 days.

Your rights

You may ask what is kept about you, have it corrected or deleted, limit its use or object to it, and have it in a common format. You may also complain to a supervisory authority: in Austria the Datenschutzbehörde (dsb.gv.at), or the authority of the EU country you live in.

Counting visits

To learn whether and how the game is used, it counts page views and a few clicks, such as on the links to Patreon and to the rating form, with Umami on its own server. Umami sets no cookie and keeps no address. From the address and browser of your connection it makes, for a moment, a code that changes every day, so that the pages of one visit count as one visitor; from the address it also takes country, region and city. It keeps the page, the site you came from, browser, system, device type, screen size and language. Game codes are left out, and nothing goes to anyone else. This is allowed by the operator's legitimate interest in knowing whether the game is used (Art. 6(1)(f) GDPR). With "Do Not Track" switched on in your browser nothing is counted; you may also object by writing to the operator. The counts are deleted after two years.