English

Zaparo Chess: Privacy Policy

Last updated 2026-10-01.

Zaparo Chess collects the following, and nothing else.

What	Specifically	Why	Shared
App activity	A report's reason from a fixed list of six, and a small map of ids the app already has. No free-text field anywhere; A score this user submitted to an app-defined board, when they achieved it, and an optional opaque proof string the app supplies - keyed on their Zaparo ID user id; How far each person has read in each conversation, and a short-lived rate-limit counter per person per conversation; Link token opened, and the Play install referrer used to match a deferred link after install; Recorded runs a player uploads through GhostPoolClient: the game, the language and the replay the app recorded (in a word game the word played, each guess and when it was made), keyed on their Zaparo ID user id; The message payloads, opaque to this module and relayed rather than stored; The moves, result, time control and clock of each online game, and the four ratings computed from them; Which applications within this one tenant the account has been seen in. Recorded when an application registers a device or completes a sign-in under its own application id, so `me().apps` can answer it back to the person.; Which leagues this user is in, when they joined, and the scores they pushed into them; and, where the app uses weekly divisions, the tier this user stands in and each week's total with the group it was played in - keyed on their Zaparo ID user id; Who a signed-in user is friends with, who they have a pending request with, and the short code they hand out - all keyed on their Zaparo ID user id	Account management, App functionality, Fraud prevention, security, and compliance	No
App info and performance	App sessions, as Firebase Sessions reports them to Crashlytics: when the app came to the foreground and started a session, with the package name, OS and SDK versions, network type, and device manufacturer and model; Crash reports: what went wrong, the phone model and the Android version; Crash stack traces and performance diagnostics; Crash stack traces, ANRs and breadcrumbs	Analytics, App functionality, Fraud prevention, security, and compliance	No
Device or other IDs	An identifier for the phone, sent with an ad request and with the report that an ad was shown or tapped. It is the advertising identifier only where the app has been declared for it in Play; everywhere else it is an identifier this SDK generates for that install alone, which no other app can read and which dies when the app is removed. Neither is stored as it arrives: the server keeps a keyed hash of it, so the ads cannot be traced back to the identifier.; Crashlytics installation UUID; Crashlytics installation UUID, attached to each crash report; FCM registration token; Firebase installation ID, from the Firebase Installations SDK that Crashlytics brings in; it is sent with each app session and used to renew the Crashlytics installation UUID; The account identifier, and the public half of a key generated in the device key store; The caller's user id and the id of the person being blocked or reported; The caller's user id, carried on each message so the other players know who sent it; The caller's user id, sent with each heartbeat so others in a scope can be shown who is here	Account management, Advertising or marketing, Analytics, App functionality, Fraud prevention, security, and compliance	No
Messages	A name or a message the player typed, sent for a yes-or-no verdict and kept by nobody; Free-text messages sent to the person you are playing; The text of messages a person sends, and who sent each one, hung on an opaque topic key the app chooses - keyed on their Zaparo ID user id	App functionality, Fraud prevention, security, and compliance	No
Personal info	A Zaparo ID, and the email address and display name if the player chooses to sign in; Email address, and the name a provider reported, from the sign-in the person chose. Those two and nothing else: a browser provider is asked for `openid email profile` and only the address and the name are read out of what comes back.; The display name and profile picture reference the app writes into a recorded run's label, shown to other players of that app beside the run	Account management, App functionality	No

How long your data is kept

Who holds each kind of data listed above, and when it is deleted:

App activity, App info and performance, Messages, Personal info: Your games and ratings stay on our servers until your account is deleted. Chat messages stay for 90 days or until your account is deleted, whichever comes first. Crash reports are kept by Google on its own schedule.
App activity, Device or other IDs, Personal info: Zaparo ID, our sign-in service, keeps it for as long as your Zaparo ID exists. Your Zaparo ID is shared by every Zaparo app you use, so deleting your data in one app removes only that app's link to it.
App activity: On our servers. A link's record stays until the link expires, is revoked, or the account that made it deletes its data; nothing else is kept.
App activity, Messages: On our servers, until your account is deleted. A conversation left with no messages in it is deleted at the same time.
Device or other IDs: The notification token stays on our servers until your phone unregisters it or your account is deleted.
App activity, Device or other IDs, Messages: On our servers, until your account is deleted. Blocks are then removed in both directions. A moderator's decision on a report someone else made stays, with your name taken off it. Text checked by our filter is kept only while that check runs, and no longer.
Device or other IDs: On our servers, and only while you are present: the record is short-lived by design and is deleted at once when your account is deleted.
App activity, Device or other IDs: Held in our servers' memory for at most five minutes, and only so a player whose connection dropped can be sent what they missed. Nothing is written to disk, so there is nothing here for an account deletion to remove.
App activity: On our servers, until your account is deleted or the app removes the leaderboard.
App activity: On our servers, until your account is deleted. A club is deleted when its owner leaves, and also when no one is left in it. Your place in a weekly league, its weekly total and whether you moved up or down are kept with your account, so a past week can still be settled.
App activity: On our servers, until your account is deleted. Friendships and friend codes do not belong to one app, so deleting them removes them from every app that used them.
Device or other IDs: Our ad server keeps each ad view and tap for 35 days, linked only to a one-way code made from the device identifier with a secret key (a keyed hash), never to the identifier itself. Then that whole day's records are deleted, and the totals that remain identify no phone. A record of which ads a phone has already been shown is kept for 30 days, so the same ad is not shown to it again.
App info and performance, Device or other IDs: Google (Firebase Crashlytics) keeps crash reports, minidumps (snapshots of memory at the moment of a crash), the installation IDs and the session data sent with them for 90 days, then removes them from its live and backup systems. We keep none of it on our own servers.
App activity, Personal info: On our servers, which keep your newest 500 recorded runs in each app, until you delete them or your account is deleted.
App info and performance, Device or other IDs: Google (Firebase Crashlytics) keeps it for 90 days, then removes it from its live and backup systems.

Deleting your data

You can ask for your data to be deleted at any time, at the address below.

Email privacy@kbsoap.com with the subject “Delete my data” and the app's name, Zaparo Chess.
If you signed in, send it from the email address you signed in with, or write that address in the message, so the request can be matched to your account.
Your data in Zaparo Chess listed above is deleted within 30 days of your request, except what the list above says is kept, for as long as it says.
Your Zaparo ID is shared by every Zaparo app you use, so it is not deleted: only its link to Zaparo Chess is removed, and your data in other Zaparo apps stays.

Contact

Questions about this policy, or a deletion request: privacy@kbsoap.com