Privacy policy

Last updated 4 November 2026

Shohmot is run by the Shohmot team. This page says what we keep about you, why, and what you can do about it. The short version: we keep as little as we can, most of your chess analysis never leaves your browser, and you can download or delete your account at any time from Settings.

What we keep on our server

• Your account: your name, your email address, and your password, which is stored only as a salted scrypt hash, never in a form anyone can read.
• Your chess usernames on Chess.com and Lichess, which are public on those sites, and your settings (tilt guard, weekly email).
• Sign-in sessions: a random token in a cookie on your device. We keep only a hash of it, for up to 30 days.
• Coaching: if you join a coach, which coach. Your coach can see your chess usernames and your games, and you can leave whenever you like.
• Short-lived security data: your IP address, used to limit sign-in attempts and requests. It is kept in counters that expire after at most an hour.
• Usage counts: how many pages were viewed and how often features were used each day, with no cookies. Unique visitors are counted using a hash of your IP address and browser that changes every day, so nobody can be followed from one day to the next.

What stays in your browser

Game reviews, analysis boards, your brilliant moves and your training positions are worked out by Stockfish on your own device and kept in your browser’s storage. We don’t receive them. Games you paste into the review page aren’t sent to us either, unless you ask Fischer for AI coaching (below). Clearing your browser’s site data deletes them.

Fischer’s AI coaching

In a game review, Fischer can coach you with AI. Nothing is sent until you choose “Coach me through it” (your choice is remembered in your browser). Then, for each message, we send the game’s moves, Stockfish’s notes on them and your question to Anthropic, whose Claude model writes Fischer’s reply. We don’t store the conversation; your browser keeps it until you leave the page. Anthropic handles the request under its own commercial terms and doesn’t use it to train its models. Fischer can make mistakes: Stockfish’s evaluations are the ones to trust.

Who else is involved

• Chess.com and Lichess: we ask their public APIs for the games of the usernames you add. Your browser also asks Lichess for cloud evaluations of positions in a review.
• Vercel hosts the site and Upstash stores the account data above.
• Resend delivers our emails: password resets, email confirmation and the weekly recap.
• Have I Been Pwned: when you choose a password, we send the first 5 characters of its SHA-1 hash, never the password, to check it hasn’t leaked in a data breach.
• unpkg serves the Stockfish engine file your browser downloads.
• Anthropic writes Fischer’s AI coaching, only when you ask for it (see above).

We don’t sell your data, show ads, or use advertising or tracking cookies.

Emails

We send account emails (confirming your address, resetting your password) and, if it’s on, a weekly recap of your games. Each recap has a one-click unsubscribe link, and you can turn it off in Settings.

Your choices

• Download everything we keep about you: Settings → Your data → Download my data.
• Delete your account: Settings → Your data → Delete my account. It’s removed straight away.
• Correct your name or chess accounts in Settings at any time.
• For anything else, including questions about this policy, write to support@shohmot.app.

Depending on where you live (for example under the EU and UK GDPR), you also have the right to object to how we use your data, and to complain to your data protection authority. We use your data to provide the service you signed up for (contract) and to keep it secure (legitimate interest).

Children

Shohmot isn’t meant for children under 13. If you are under the age where you can agree to this yourself where you live, ask a parent or guardian to agree for you.

Changes

If this policy changes in a way that matters, we’ll say so on the site and, for big changes, by email. The date at the top shows the last change.