Privacy policy

Last updated: 8 November 2026. This describes the Enroque app and the server it talks to, as they are built today. If this changes, this page changes first.

In short. No ads. No tracking. No analytics. No third-party SDKs. The app only stores what it needs to run online games, ratings and game backups, tied to a random anonymous ID rather than to your name or email.

Who we are

Enroque is made by an independent developer. Contact: [email protected].

What stays on your device

Your settings: theme, display level, computer level, and similar preferences.
The game in progress, so the app can offer to resume it.
Your anonymous player ID and its secret key, kept so the same device is recognised by the server.

What the Enroque server stores

Online features and game backups use a small service we run on Cloudflare (Workers and Durable Objects). It stores:

An anonymous player ID and a secret used to prove it is you. It is random. It is not linked to your Apple ID, email or phone number, and there is no sign-up.
A display name, only if you enter one (up to 24 characters). It is shown to opponents and on the leaderboard. Do not use your real name if you prefer not to.
Saved games: the move list, clocks, mode and computer level of Computer, Pass and play and Table games that the app backs up so they can be restored. Each is limited in size and only the newest ones are kept.
Ratings and results: your rating (Glicko-2, with its uncertainty), record (wins, draws, losses), peak rating and a short history of recent ranked games, including opponents' display names and ratings.
Online games: the moves, clocks and result of games played with a friend code or through matchmaking, and a temporary entry while you wait in the matchmaking queue.

The service applies rate limits per network address to prevent abuse. Cloudflare, as our hosting provider, processes network addresses to deliver and protect the service, as any web host does. We do not use them to identify you, and we do not build advertising profiles.

What is not collected

No advertising, no advertising ID, no ad networks.
No analytics or crash-reporting SDKs, and no trackers on this website either: the website sets no cookies and loads nothing from other companies.
No location, contacts or photos. The microphone is used only if you turn on voice moves (see below).

Friends, clubs and notifications

If you use them, the server also stores: a friend code (derived from your anonymous ID), the list of players you follow, club names, invite codes and memberships, arena standings, and the code of the game you are in so a friend who you have also added can watch it. A friend only sees your live game if you have added them back. If you allow notifications, the server stores your phone's push token (issued by Apple) and uses it to send a "your move" alert when you are not in the app; it is removed if Apple reports it as invalid.

Reports and blocks

If you report a player, the server stores your anonymous ID, the reported player's ID and display name, the reason you chose, the game code if you reported from a game, and any note you add. Reports are kept for up to 90 days and are used only to review abuse. Your list of blocked players is stored with your player ID and deleted with it.

Sign in with Apple

This is optional. If you use it, the server stores the identifier Apple provides for your Apple account, only to link your anonymous player to it so a second device can restore your games and rating. We do not receive or store your email address or name from Apple.

Playing on Lichess

This is optional. When you choose to sign in to Lichess, the app opens lichess.org in a system browser sheet and Lichess gives the app a token that lets it play games for you. The token is kept in this device's Keychain. The app talks to lichess.org directly for those games: nothing about them goes through our server. Lichess handles that data under its own privacy policy. Signing out in the app deletes the token from the device; you can also revoke it in your Lichess account settings.

Voice moves

If you turn on voice moves, the app asks for microphone and speech recognition permission and uses Apple's speech recognition to read your move. Depending on your device and settings, Apple may process the audio on its servers under Apple's privacy policy. We do not receive or store any audio.

Nearby play

Nearby games connect two devices directly over Bluetooth or peer-to-peer Wi-Fi. They do not go through our server. iOS asks permission for local network access first.

Camera

The app includes a small on-device test that can start the camera at low resolution to find out whether it affects the phone's outer display. It does nothing with the frames: nothing is recorded, stored or sent anywhere. The camera is off unless you start that test and allow access. Camera features for following a physical board are planned but not available.

Purchases

Enroque Pro is bought through the App Store. Apple handles the payment and tells the app whether you own Pro. We do not receive your payment details.

Your choices

You can play the computer, pass and play, and Nearby games without using any online feature.
You can delete your online data in the app: More, then Delete my online data. It removes your player ID and its rating, saved games, friends, clubs, notification token and Apple link from the server, and replaces your name on your recent rated games with "Deleted player". You can also write to the contact address above with your player ID. Game records of games already finished may remain without your name for a short while. Deleting the app removes the data on your device but not the server copy.

Children

Enroque does not knowingly collect personal information from anyone. It asks for no email, birthday or real name. Online play lets players choose a display name and play strangers in ranked matchmaking; a dedicated kid-safe mode does not exist yet.

This website

This website is static pages. It sets no cookies, runs no analytics and loads no third-party scripts, fonts or images. Our host, Cloudflare, may keep standard server logs for security and operation.

Changes

If we change what is collected, we will update this page and its date before the change ships.