Privacy
Last updated
Who is responsible
Samuel Statz, c/o POSTFLEX PFX-416-167, Emsdettener Straße 10, 48268 Greven, Germany. Email: hello@mansuba.org.
No cookies, no tracking profile
Mansuba sets no cookies and shows no ads. We do not build profiles and we do not use advertising or tracking services.
What stays in your browser
To do what you ask, the site remembers things on your device: which positions you have played, the game mode, language and theme, the size of the board and, if you enter them, your Lichess usernames. This stays in your browser. We do not read it and it is not sent to us. You can delete it in your browser settings at any time. If you load your Lichess games, they are stored in your browser database (IndexedDB) on this device, only after you agreed on the page where they are loaded: the moves, the result, the speed, your rating and the date of each game. Opponent names are not stored. You can download these games as a backup file and delete them with one button. They never leave your device. If you let the chess engine rate your repeated decisions, the results (which move cost how much in which position) are stored there too. The engine is a file of this site and is loaded from our server like any other file, the rating itself runs on your device and sends nothing.
Hosting and server logs
The site is delivered by Cloudflare, which acts as our service provider. To deliver the pages and to protect against abuse, Cloudflare processes technical data such as your IP address when you open a page. Legal basis: our legitimate interest in a secure and working site (Art. 6 (1) (f) GDPR). Cloudflare may process data outside the EU. The request logs we switched on to find errors are deleted by Cloudflare after three to seven days, depending on the plan.
Counting without identifiers
We count events per day, for example how often the daily puzzle was started or finished, how far people get through its five positions, how it was scored in tenths of the possible points, which mode was chosen, that a Lichess name was entered (never the name), clicks on the support button and on the buttons of the end card, whether the board settings were opened or changed, whether light or dark was chosen, and how many positions were played in one visit. We also count whether a visitor comes back after a day, a week or a month: the browser works that out from the date of the last visit kept on your device, and only the name of the count is sent, nothing that identifies a person. For a played position we also count which position it was and whether it went well, half well or badly, so we can see which positions are too easy or too hard. Only the name of the event, the language and a daily total are stored. No IP address, no identifier, no username and nothing that could single out a person is stored. For page views, origin and loading times we use Cloudflare Web Analytics, which works without cookies and without storing anything on your device. Cloudflare keeps this evaluation for six months.
Lichess
Your browser contacts lichess.org only when you click: first to look up the account name you entered (one small request), and then, after you agreed, to load its public rated games. Lichess then sees your IP address and which account name was requested. Nothing passes through our server. Lichess is responsible for its own processing, see lichess.org/privacy. If you sign in with Lichess (optional), Lichess asks for your permission on its own page and hands a token to this browser tab. No password goes to us and nothing is requested beyond your public games. The token stays in this tab and is revoked when the analysis ends.
Feedback box
The feedback box sends us what you type: the message, the topic you choose, the language and, only if you enter it, your email address. The message is stored in our database at Cloudflare and sent to us by email through the mail service Resend (our processor, based in the USA). We use it only to read your feedback and to answer you, and delete it after twelve months at the latest. Legal basis: our legitimate interest in answering inquiries and improving the site (Art. 6 (1) (f) GDPR). A small sum protects the box from bots; it is kept for fifteen minutes without any identifier and deleted when answered.
Contact by email
If you write to hello@mansuba.org we use your message and address only to answer you and delete them once the matter is closed, unless a legal duty to keep them applies.
Your rights
You have the right to access, correction, deletion, restriction of processing, data portability and objection. You can also complain to a data protection authority. For us this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (ldi.nrw.de).