Privacy policy
Effective October 22, 2026
Still in Book is a free chess opening trainer run by an independent developer. This page explains what it stores about you, what it doesn't, and how to delete it. Questions go to admin@stillinbook.com.
What we store
You can practice the free opening without an account, and then nothing about you is stored on our servers. If you create an account, we store:
- Your email address, to log you in, verify your account and reset your password.
- Your password, only as a one-way hash. Nobody, including us, can read it.
- Your practice: which lines you completed, as which side and on which day, your Survival scores, your achievements and your settings.
- Your login sessions: a hashed session token, your browser's name and version (its user agent), when you last visited and when the session expires (after 60 days).
- Short-lived links for verifying your email and resetting your password, stored only as hashes and expiring on their own.
If you send feedback, we store your message, the page you sent it from and your browser's user agent, linked to your account if you're logged in.
If something breaks, the site records the error so it can be fixed: the error message, the page and your browser's user agent. Error reports never include your account, your IP address or what you typed.
What we don't collect
There are no analytics, no ads, no tracking and no third-party scripts. The site doesn't keep logs of visits or IP addresses. Your IP address is used only briefly, in memory, to slow down repeated login and signup attempts. We never sell or share your information with anyone for marketing.
Cookies and storage
- A login cookie that keeps you logged in. Scripts on the page can't read it.
- A session cookie used only to show one-time messages, such as "Preferences saved."
- Practice results that haven't been saved to an account yet, kept in your browser's local storage. If you're logged out, they stay on your device until you log in; if a connection drops, they're sent when it comes back.
None of these are used for advertising or tracking, so there's no cookie banner.
Who else handles your data
- DigitalOcean hosts the site and its database, in the United States.
- Resend sends the site's emails (verification and password reset), so it receives your email address and the message.
How long we keep it
Your account and everything linked to it are kept until you delete the account. Deleting it erases your email address, password, practice, achievements and sessions straight away. Feedback you sent is kept, no longer linked to you.
Backups of the database are kept for up to 30 days, so a deleted account disappears from them completely within 30 days.
Your choices
On your account page you can change your preferences and delete your account. You can reset your progress from the Progress page, and change your password with "Forgot password?" on the login page. To change your email address, see a copy of what we store about you, or ask anything else about your data, email admin@stillinbook.com.
Children
You must be 13 or older to create an account. If you believe a child under 13 has created one, email us and we'll delete it.
Changes
If this policy changes, this page will show the new date at the top.