This Privacy Policy explains how OTBSync ("we", "us", or "our") handles information when you use the OTBSync application and related services (the "Service"). By using the Service, you agree to this Policy. It should be read together with our Terms of Service.
The Service uses your device camera to detect moves on a physical board. If you play in the "phone-only" mode and explicitly enable it, the Service may also use your microphone for voice-controlled moves. Camera frames are processed locally on your device, directly in your browser. In normal use we do not upload, transmit, or store your camera images or video, and your live video is never streamed to us. When two devices are paired over a direct connection, the video stream travels directly between your own devices, or through an encrypted relay (TURN) server when a direct connection is not possible; in either case it is encrypted between your devices and we cannot view or store it.
One narrow exception — opt-in diagnostic images. Testers holding a special access pass may choose to attach still camera frames to a diagnostic report to help us fix a detection problem. This is off by default and never happens unless you explicitly turn it on; when on, it captures occasional still images (not video) only for the specific incidents you report. Turning it off deletes any such images still queued on your device. If you do not enable this, no camera images ever leave your device.
Voice. If you enable voice control, OTBSync itself does not store or intentionally transmit your audio. However, voice recognition is performed by your browser or operating system's built-in speech service, which — depending on your browser and OS vendor and settings — may process audio on-device or on the vendor's servers. That processing is outside OTBSync's control and governed by your vendor's privacy policy. Every voice workflow has a non-voice alternative.
If you log in with Lichess, authentication uses OAuth (PKCE). Your Lichess access token is stored locally in your browser and is used to communicate with Lichess directly. We do not receive or store your Lichess password, and we do not store your Lichess token on our servers. Your use of Lichess is governed by Lichess's own privacy policy; we are not affiliated with Lichess.
| Data | When | Contains |
|---|---|---|
| Diagnostic reports | Only if you opt in (a background-reporting setting) or tap "Report" | Board positions, detected-move evidence, and non-identifying camera health metrics. Excludes video, audio, device identifiers, and account credentials. Does not include camera images unless you are a pass-holding tester who has explicitly opted in to attaching diagnostic still frames (see Section 1). An optional free-text note is included only if you type and send one. |
| Usage analytics | Enabled by default; can be turned off in settings | A randomly generated visitor identifier, dates of use, and game modes played, used to count unique and daily visitors and to see which modes players enjoy. No name, email, or account data. |
| Voice model download | Only if you select a premium (Kokoro) voice | Your browser downloads the speech model directly from the Hugging Face model repository, which transiently sees your IP address. No board or account data is sent. |
| Connection metadata | When you pair devices or your app contacts our functions | Our hosting provider and functions transiently process network information such as IP addresses to route connections and prevent abuse. |
Where the GDPR applies, we rely on your consent for optional diagnostic reports (which you can withdraw at any time in settings), and on our legitimate interests in operating, measuring, and securing the Service for anonymous usage analytics and connection metadata. You can object to analytics at any time by turning it off in settings.
We do not sell your personal information. We share data only with service providers that help us operate: our hosting and serverless platform (Netlify); if enabled for device pairing, a third-party relay (TURN) provider; and the Hugging Face model repository, from which your browser downloads speech models if you select a premium voice. Connecting to Lichess sends data directly to Lichess under their terms.
To exercise a right or ask a question, contact hello@OTBSync.com.
The Service is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal information from them.
We and our service providers may process data in countries other than yours. Where required, we take steps to ensure appropriate safeguards for such transfers.
We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this Policy: hello@OTBSync.com.