Privacy Policy
Last updated: August 5, 2026
This Privacy Policy explains what information HummerChess collects, how we use and share it, and the choices and rights you have. It applies to hummerchess.com and related HummerChess applications (the “Service”).
1. Who is responsible
The data controller is Chongchuan Xiaohanma Culture & Art Exchange Studio (崇川小悍马文化艺术交流工作室), China, operating HummerChess. For any privacy question or request, contact support@hummerchess.com.
2. Information we collect
Account data: email address and/or phone number, sign-in identifiers from providers you choose (Google, Apple or WeChat — such as your name, avatar and an account identifier like a WeChat OpenID/UnionID), username, display name and avatar. Activity data: your games, moves, results, ratings, puzzle and training progress, analysis requests, settings and preferences. Social data: friends, messages you send within the Service, and support tickets. Technical data: IP address, the approximate country/region derived from it (used for language and regional defaults), device and browser type, and security and diagnostic logs.
3. How we use information
We use data to: provide and operate the Service (accounts, play, sync across devices); keep it safe and fair (authentication, anti-abuse, anti-cheating, rate limiting, captcha); send service messages such as verification codes and important account notices; provide support; understand usage in aggregate and improve features; and comply with legal obligations. Where laws such as the GDPR apply, our legal bases are performance of contract, legitimate interests (security, improvement), consent (for optional features) and legal obligation. We do not sell personal data and we do not use it for third-party advertising.
4. Payments
Payments are processed by Paddle.com as Merchant of Record, acting as an independent data controller. Paddle collects your payment details directly — card numbers never reach our servers. We receive from Paddle order and subscription information such as your name, email, country, purchase history and subscription status, which we use to activate entitlements and provide support. See Paddle's privacy policy at paddle.com/privacy.
5. Service providers and sharing
We share data only as needed to run the Service: infrastructure and database hosting (Supabase, Vercel), email delivery (Resend), SMS delivery for Chinese phone numbers (Alibaba Cloud), captcha and bot protection (Cloudflare Turnstile; Tencent Cloud Captcha for users in China), payments (Paddle), and the sign-in providers you choose (Google, Apple, WeChat). These providers process data under contracts limiting use to providing their services. We may also disclose data where required by law, to protect the Service and its users, or as part of a business transfer. Public parts of your profile (username, rating, avatar, and games you play or share) are visible to other users.
6. International transfers
We operate globally: data is processed on infrastructure that may be located in the United States, Europe and other regions, and SMS messages to Chinese phone numbers are delivered through providers in China. Where required, we rely on recognized safeguards such as standard contractual clauses with our providers.
7. Retention
We keep account data while your account exists. If you delete your account in Settings, your personal data is removed; game records remain part of your opponents' histories and of aggregate databases in de-identified form, and limited records may be retained where necessary for security, fraud and fair-play enforcement, dispute resolution or legal compliance, and are then deleted. Residual copies leave backups on a rolling schedule.
8. Security
Data is encrypted in transit; access to production systems is restricted; payment credentials are handled solely by our payment partner. No online service can guarantee absolute security, but we take reasonable and proportionate measures to protect your data and will notify affected users of significant incidents as required by law.
9. Your rights and choices
You can view and edit profile data in Settings and permanently delete your account there. Depending on where you live, you may also have rights to access, correct, export, restrict or object to processing, and to withdraw consent; contact support@hummerchess.com to exercise them and we will respond within the legally required time. You may also lodge a complaint with your local data-protection authority.
10. Cookies
We use only cookies and similar storage necessary for the Service: keeping you signed in, remembering language, region and theme preferences, and security (our captcha providers may set their own cookies for bot protection). We do not use advertising or cross-site tracking cookies.
11. Children
The Service is intended for users aged 13 or over (or the higher minimum age where you live); younger children may use it only with the consent and supervision of a parent or guardian where the law allows. We do not knowingly collect personal data from children below these ages — if you believe a child has provided us data, contact us and we will delete it.
12. Changes and contact
We may update this policy as the Service evolves; material changes will be announced in the app and the “Last updated” date revised. Questions and requests: support@hummerchess.com.
HummerChess is operated by Chongchuan Xiaohanma Culture & Art Exchange Studio (崇川小悍马文化艺术交流工作室), a registered sole-proprietorship business in Nantong, China (Unified Social Credit Code 92320602MA257LG02W).
Contact: support@hummerchess.com