PRIVACY & ANALYTICS

Your visit, your choice.

Last updated: 1 November 2026. Chess in Bali is operated from Indonesia. For privacy questions, access, correction or deletion requests, contact chessinbali@gmail.com.

Personal tournament notes

My notes automatically stores your text with your account identifier and tournament in our database so you can access it on another device. Notes are not published or sent to AI or analytics. You can erase a note by clearing its text and waiting for the saved confirmation. Database recovery backups may retain earlier copies for their normal retention period.

Automatic traffic totals

To understand demand for this community guide and improve its content and performance, our server counts requests for public pages. It stores separate daily totals for pages, referral categories, broad device/browser categories and country when the hosting provider supplies it. These counters do not store IP addresses, full browser strings, visitor identifiers, cookies, query strings or individual browsing histories. Counts cannot tell us how many unique people visited.

We use these limited statistics for our legitimate interest in operating and improving the guide, with identifying request details discarded from our analytics. Anonymous totals are retained without an automatic age cutoff. Recognised bots, prefetches, private admin pages and requests with Do Not Track or Global Privacy Control are excluded. The hosting provider necessarily processes connection information to deliver and secure the website; its operational logs are separate from these counters.

Cookieless visit statistics

To learn how many people use the guide and what helps them, a small script on public pages tells our server which page you opened, the website or campaign link that brought you (only its address, such as google.com, and any utm_source, utm_medium and utm_campaign tags), how long the page was visible and in use, how far you scrolled, which kind of link you clicked (for example registration, Maps or WhatsApp, with the website’s address but never the full link, phone number or message), loading-speed measurements, and our own script errors with addresses, emails and numbers removed. Our server adds your country and broad device, browser and system type.

Our statistics set no cookie of their own and take no fingerprint (the hosting provider’s own cookie is described under Hosting and other services). To count each person once per day, the server combines your connection address and browser string with a random key that changes every day (Bali time) and is then deleted, and stores only the result. The address and browser string are not stored, and visits on different days cannot be linked. To tell new visitors from returning ones, your browser keeps one entry, “chessinbali:seen-v1”, holding only the month of your first visit; it expires after 13 months and is never extended. Visits by the site owner, search engines and other automated tools are marked as such and left out of the counts.

We use these statistics for our legitimate interest in running and improving the guide. They are kept without an automatic age cutoff and only the owner can see them. Browsers sending Do Not Track or Global Privacy Control send nothing and store no entry. To remove the entry, clear this site’s browser storage.

Optional Google Analytics

Only after you choose Allow analytics do we load Google Analytics and permit its analytics cookies. This measures page views, sessions and return visits, approximate location, browser/device information, reading time, scroll depth, venue visibility, gallery use, calendar actions and clicks on Maps, Instagram, WhatsApp, registration and brochure links. A click does not tell us whether you registered, sent a message or attended.

Our custom events contain action categories and public venue/event identifiers, not phone numbers, bank details, messages, uploaded documents or form contents. We remove query strings and fragments from page URLs and reduce recognised external referrers to their website origin. We do not enable advertising personalisation, Google Signals, cross-site advertising pixels, precise GPS location or session recordings.

Google receives the connection needed to serve and collect Analytics data and may process data outside Indonesia, including in the United States. Read how Google uses information from partner sites and Google’s privacy policy. Your consent applies to this optional analytics processing and its disclosed international processing. We do not use consent as permission for unrelated purposes.

Optional visitor diagnostics

Allow analytics also enables our own owner-only dashboard: individual page histories and actions, campaign labels from links, session and return times, IP/network addresses, approximate network location, browser and device information, errors, performance, scrolling, clicks and time spent on public pages. We use these to understand which features work and diagnose problems. Shared IPs and estimated device matches do not identify a person; VPN, bot and location indicators may be incomplete or inaccurate.

Device diagnostics include browser fingerprints derived from canvas, WebGL, generated audio processing, fonts and supported capabilities. Where the browser permits it, we sample motion/orientation and battery/network information. A pose display reconstructs sensor readings; it is not a camera or screen recording. We never request microphone recordings, camera access or GPS for analytics, and do not record typed text or private admin pages.

A random visitor identifier is mirrored in cookies, local/session storage, IndexedDB, Cache Storage and window metadata. Dedicated cached image identifiers can recognise this browser only while a valid, recorded analytics permission remains. These mechanisms do not restore tracking after refusal, expiry or a missing permission. Consent lasts 180 days. Under this notice, detailed records remain in our history until the owner deletes them, they are no longer needed for the stated purposes, or a deletion request is fulfilled; there is no automatic 30-day cutoff. Records collected under the earlier 30-day notice keep that shorter limit.

Data is stored on the site’s OpenAI/Cloudflare infrastructure and may be processed outside Indonesia. Browser network diagnostics may connect to Google’s STUN service, which receives the connection address. We do not sell this data. Contact us to access or delete your records; your browser’s random consent receipt can help locate them.

Changing your choice

Use Analytics preferences in the footer to accept or refuse. Both choices leave the website fully usable. Your choice lasts for 180 days on this browser; analytics cookies are set to expire after 180 days without automatic extension. A new purpose or notice version requires fresh consent. Refusal stops optional tracking immediately, revokes identifier recovery, clears our browser identifiers and removes the site’s Google Analytics cookies. It does not automatically erase data Google already received. Contact us about deletion requests.

We keep a random consent receipt, your choice, the notice version and its time for as long as the associated detailed records are retained so we can demonstrate the choice. The receipt is linked to our optional visitor permission so we can honour withdrawal; it is separate from aggregate totals and is not sent to Google. Browsers sending Do Not Track or Global Privacy Control are treated as refusing optional analytics. If you are under 18, ask a parent or guardian before enabling optional analytics.

Information you submit

Contact messages, corrections, venue suggestions and any contact details or files you voluntarily send are used to respond and maintain the guide. They are available to the owner for review. Tournament drafts and original brochures are available only to their invited uploader and the owner until publication; published event details and enabled original brochures are public. Brochure reading sends the uploaded file to Google Gemini for extraction. Private admin forms, account details and uploads are excluded from visitor analytics.

The Contact form keeps a temporary recovery copy of unfinished text and contact details in the current browser tab. It is not sent to us until you submit and is not used for analytics. Sending successfully or discarding clears the copy. A normal tab closure ends this storage session, although browser session restoration can vary. Files are not stored in the recovery copy and must be selected again after a refresh.

Invited contributors sign in with ChatGPT. The website receives their account identifier, email and, when supplied, display name. We use these to match invitations, protect submissions and attribute upload/reading attempts. Invitation and access records, including acceptance and removal dates, remain visible only to the owner. Operational upload and reading logs can include the account, request IP, time, outcome and provider usage. Removing access stops future management of submissions; it does not remove already published tournaments or these records. Contact the owner for correction or deletion requests.

Hosting and other services

Player-group filters are remembered in this browser’s local storage so the website can restore your selection on later visits. This preference is not sent to us or used for analytics and does not change a calendar subscription. Choose All player groups to reset it, or clear this site’s browser storage to remove it.

Your language preference is stored in this browser. When you switch languages, temporary view state helps preserve filters, calendar position and the map. Public event text may be sent to Google Gemini for Indonesian and Russian translation and automated checking; private Contact forms are not sent for this purpose. Translation does not change the original facts. Current English text remains available when translation is unavailable.

For signed-in tournament editors, this browser keeps a recovery copy of unfinished form edits, separate for each account and submission. It is used only to recover your work, not for analytics. Recovery copies expire after seven days and expired copies are removed when the editor is next opened. Saving, discarding the recovery copy or using the website’s Sign out link clears the relevant local copies. Clearing browser storage also removes them. These copies do not publish changes to the website.

This website uses OpenAI Sites hosting and its infrastructure providers. Owner sign-in and security use necessary service functionality. The hosting provider also sets its own cookie, __Host-appgarden-visitor, whenever a page is opened, including before any analytics choice and when your browser sends Do Not Track or Global Privacy Control. It holds a random identifier and expires 90 days after your last visit. We do not set or use it and cannot turn it off; the provider’s privacy terms apply. Clearing this site’s cookies removes it. Opening an external map, social account, registration service or WhatsApp link takes you to that provider, whose own privacy terms apply. As checked on 22 September 2026, Google Analytics event-level retention is two months and user-data retention is fourteen months; its user-data timer resets on new activity. Aggregated reports can be retained longer. These provider settings are separate from our 180-day cookie and consent-choice lifetime.

Map data credits

Missing venue cities and regencies can be resolved on our server from venue pins using geoBoundaries Indonesia administrative boundaries (BPS–Statistics Indonesia, World Food Programme and OCHA ROAP; 2020 boundaries, 2023 build). The boundary data is used under CC BY 3.0 IGO. We compacted the data for lookup. This uses venue locations, not your device location.