Passwords are hashed
ChessForgePro passwords are stored as Argon2id hashes, not recoverable plain-text passwords.
Security & Data
Your games are training data, not a hidden permission request.
A plain-language view of what ChessForgePro stores, what it does not need and which controls stay with you.
Sessions use protected cookies
Authentication is carried through HTTP-only cookies so application JavaScript does not need the session secret.
Connections can be removed
Disconnect a chess platform without giving ChessForgePro control of that external account.
Data map
What is stored and why.
ChessForgePro stores the information needed to operate training, synchronization and account controls.
| Category | Examples | Purpose |
|---|---|---|
| ChessForgePro account | Email, password hash, plan and account settings | Sign-in, account controls and plan limits |
| Connected chess account | Platform, public username and synchronization state | Import public games and rating history |
| Games and analysis | PGN data, results, engine evaluations and derived position evidence | Game review, Coach Report and personal exercises |
| Training activity | Attempts, completion, timing and aggregated progress | Choose future exercises and measure improvement |
| Operational records | Limited security, error and job metadata | Protect accounts, diagnose failures and operate the service |
Connection flow
Connecting a chess account does not share its password.
- 1You provide a public username
Lichess or Chess.com credentials stay with that platform.
- 2Public games and ratings are requested
Background jobs collect the data used by your training account.
- 3Analysis becomes private training evidence
Game review, puzzles and Coach Report data belong to your ChessForgePro account.
Your controls
Connection, retention and deletion are different actions.
Disconnect a platform
Stops future synchronization. Previously imported games remain available until separately removed.
Plan-based retention
Only the allowed number of recent games and puzzles remains active. Aggregated training statistics can be retained.
Delete the account
Settings provides a password-confirmed account deletion flow for ChessForgePro data.
Security is a process, not an absolute guarantee.
ChessForgePro uses practical safeguards including TLS in production, password hashing, protected cookies, access controls and request limits. Full legal details, retention exceptions and user rights are described in the Privacy Policy.