Privacy policy
Last updated October 3, 2026. This says what Plysight collects, why, who else sees it, how long it's kept, and what you can do about it.
Who runs Plysight
Plysight is operated by Theodore Lattis, an individual based in New York City, United States, who is responsible for how Plysight collects and uses your personal information. For questions about this policy or to exercise your privacy rights, write to [email protected].
The short version
- You can use Plysight without an account. Reports and conversations you don't save are deleted after 30 days.
- An account asks for your email and your date of birth. If you sign in with Google, Microsoft or Lichess, that service also passes Plysight its id for you and the name it shows. You can delete the account, and everything in it, from your account page.
- Plysight does not build an advertising profile about you, does not track you across other websites, and does not sell your information.
- The AI guide sends your messages, and facts from your own games, to Anthropic, the company that makes the AI it runs on. Anthropic does not train its models on this data under our commercial arrangement; its retention rules are explained below.
- Plysight is paid for by ads. They're matched to the page and to the general subject of your question, not to who you are; the section on ads says what the ad partner receives, and your choices.
What Plysight collects, and what it's used for
- What you type. Your first message on the front page and every message to the AI guide, used to answer you and to find which of your findings answer the question.
- Your games. If you give a Lichess or chess.com username, Plysight asks that site for the username's public games. If you upload files, it reads them. Either way it analyzes the most recent 200 games with a chess engine on its own server, to make your report and answer your questions. Public games name your opponents too; those names stay with the games.
- What the analysis makes. The report, the findings behind it, the games it was made from and the engine's evaluation of them. Yours to read, save, share or delete.
- Which findings you open. The page tells the guide which part of your report you're looking at, so "why?" means that part, and keeps a record of it for 30 days.
- Your account, if you make one. Your email address, used to sign you in and for messages about your account. Your date of birth, kept so the rules for your age still apply as your age changes; it isn't shown on any page, though the person who runs the site can see it in the database. Your choice about ads (below). A record that you're signed in on a browser.
- If you sign in with Google, Microsoft or Lichess. That service tells Plysight your email address, its own id for you, and the name it shows (your Lichess username, for example). Plysight keeps the id and the name to recognize you next time. It keeps no password and no sign-in token from that service.
- Sign-in codes are stored in hashed form and expire after 15 minutes.
- Replies you report, and replies that failed a check, kept for a person to read; see "Who reads it".
- Technical details. Your network (IP) address and browser details reach the server with every request, as they do for every website. Plysight uses them to limit abuse, for example how many analyses one address can start in an hour, and they appear in the server's logs.
None of this is used to build an advertising profile about you or to follow you to other websites. Plysight does not use your games or messages to train AI models; Anthropic's treatment is described below.
Why, and on what basis
| Analyzing your games, answering your questions, keeping what you save, signing you in | To provide the service you asked for. In the EU and UK: a contract. |
|---|---|
| Limiting abuse, keeping the site secure, server logs | Our legitimate interest in a working site. |
| Reading reported and rejected replies | Our legitimate interest in a guide that answers well and safely. |
| Ads matched to the page and to the subject of your question | Our legitimate interest in paying for a free service with ads that use no profile of you, balanced by your choice to turn the subject part off. |
| Ad cookies, and any use of an identifier for ads | Your consent, where the law requires it, asked for before any is set. |
Who else sees it
- Anthropic (the AI guide). Your messages and the facts from your report the guide needs to answer them go to Anthropic's AI, through its business service: your findings, details of your games (the moves, results, ratings and opponents' usernames), and your first message when the site works out which findings answer it. Under Anthropic's commercial terms it doesn't use any of this to train its models, and it normally deletes API inputs and outputs within 30 days, subject to the exceptions in its retention policy. Pressing "Report this reply" sends nothing extra to Anthropic.
- Hola AI (the ads). What it receives is set out under "Ads" below.
- Google, Microsoft and Lichess, only if you choose to sign in with one of them: you sign in on their page, and they send back the details above.
- Resend (email). It delivers the sign-in codes and account emails, so it sees your email address and the message.
- Our hosting provider, Vultr (The Constant Company, LLC), where everything is stored on a server in New York, in the United States.
- Lichess and chess.com. When you give a username, Plysight sends that username to the site to ask for its public games. Nothing else about you is sent.
- When the law requires it. Plysight would hand over what it must to meet a legal obligation.
- When security requires it. Plysight may share what is reasonably necessary to protect the site and its users from abuse, for example with a hosting provider's abuse team.
Plysight doesn't sell your information.
Who reads it
The person who runs Plysight can see what's stored. In practice they read the replies you report with "Report this reply", and the replies the site's own checks rejected, with the message before each, to find what the guide gets wrong; both are deleted after 30 days. They don't read conversations otherwise.
Ads
Plysight is free and pays for itself with ads. They come through an advertising partner, Hola AI (United Kingdom), on whose platform advertisers bid to show ads here. Plysight doesn't choose or name individual advertisers. Ads for adult content, gambling, weapons, drugs, scams, misleading financial products and political causes aren't allowed; if one slips through, report it and it will be investigated and, where it breaks that rule, removed.
What the ads use. Ads are matched to the page you're on and to the general subject of your question, for example "endgames" or "time trouble", never your words themselves. We do not use messages identified as distress disclosures to select ads. To deliver and measure ads, Hola AI's code on the page receives your network (IP) address, your device and browser details, your rough location (the city, worked out from the address), the time and length of your visit, and which ads were shown and tapped, and it may set its own cookies for delivery and measurement. Hola AI is independently responsible for how it uses this information, which it uses for matching, delivering and measuring ads, preventing fraud and improving its platform, under its own privacy notice. Plysight gives it no email address, name, account id or date of birth, hashed or otherwise, and no conversation. For accounts under 18, and in a browser whose user has said they're under 18, ads are matched only to the page; the ad partner's code still receives the technical details above to deliver and measure the ad.
Your choices. Under "Your privacy choices", linked at the foot of every page, you can turn off the use of your question's subject, so ads match only the page. Where required by law, we ask for consent before setting advertising cookies. If your browser sends a Global Privacy Control signal, Plysight treats it as that opt-out, and in US states that give a right to opt out of the "sale" or "sharing" of personal information, the same switch is that opt-out.
How long it's kept
| A report you didn't save, its games and evaluations | 30 days after it was made, then deleted |
|---|---|
| A conversation about an unsaved report | 30 days after your last message, or when the report goes, whichever is first |
| A saved report, its games, its conversation | Until you delete them or your account |
| Your account (email, date of birth, ads choice, sign-in ids) | Until you delete it |
| A signed-in browser | 30 days, or until you sign out |
| A sign-in code | 15 minutes, or until used |
| Which report your browser last opened, so the front page can lead back to it | 30 days |
| Records of which findings were opened, of replies that failed a check, and of replies you reported (with the message before each, for a person to read) | 30 days |
| Counters that limit abuse | An hour to two days |
| Emails you send to the contact address | Until the matter is closed, then deleted within a year |
| Server logs | 14 days |
| Backup copies | Deleted things drop out of backups within 14 days |
What you can do
- Delete. On your account page you can delete a saved report, or your account with everything in it: the account, its sign-in ids, its saved reports, their games and their conversations are deleted from the live site at once; backup copies follow within the period above. Without an account, "Your privacy choices" (at the foot of every page) deletes this browser's unsaved reports, their games and its conversations from the live site at once; the browser then holds nothing but its cookies, which you can clear in the browser.
- Share, or not. A saved report is private to you. You can turn on a link that lets anyone with it read the report, never your conversation, and turn it off again; a link that was turned off stops working, though copies or screenshots already made are out of Plysight's hands.
- Ask. To see what's held about you, to correct it, or to have something deleted that you can't delete yourself, write to [email protected]. We may ask for information to verify your request.
- Your rights. Depending on where you live (the EU, the UK, California and some other US states), you may also have rights to access, correct, delete, move, restrict or object to the use of your information, to withdraw a consent you gave, and to complain to your data protection authority. Ask at the address above.
Cookies
Plysight sets only the cookies it needs for the site to work. Ad cookies, if any, are Hola AI's, and where required by law we ask for consent before they're set.
plysight_browser, a random number that keeps your unsaved reports and conversations with your browser. 30 days, refreshed each visit.plysight_session, which keeps you signed in. 30 days.plysight_oauth, for the few minutes you're signing in with Google, Microsoft or Lichess, so the answer comes back to the browser that asked.plysight_signupandplysight_next, which carry you through sign-up and back to the page you were on. Half an hour or less.plysight_adult, set when you tell us you're 18 or over, so the AI guide opens without asking again. A year.plysight_minor, set in a browser whose user told us they're under 18, so the AI guide stays closed there. A year.plysight_no_signup, set when someone says they're under 13, so that browser can't start another account straight away. A day.
Children
Anyone can get a report without an account. Accounts are for people 13 and older: if your date of birth says you're younger, no account is made, nothing from the form is kept, and the reports and conversations that browser made earlier are deleted then and there. If Plysight learns that an existing account belongs to someone under 13, the account and everything in it is deleted; write to the address above.
The AI guide is for people 18 and older. Before it answers anyone who isn't signed in, Plysight asks whether they're 18 or over and remembers the answer in the browser. It stays closed to accounts under 18 and to a browser whose user has said they're under 18. A teenager's account works for saving reports and adding games; ads there are matched only to the page, and nothing from the account is used for them.
Where your information is processed
Plysight is operated from the United States, where its own systems store and process your information. The providers listed above may process information in other countries, as described in their privacy notices. If you use Plysight from elsewhere, your information is sent to the United States. Plysight holds no certification under the EU-US Data Privacy Framework or its UK Extension.
Where EU or UK law applies and requires safeguards for the onward transfer of your information to those providers, Plysight relies on the providers' own terms: the European Commission's Standard Contractual Clauses with the UK Addendum or International Data Transfer Agreement where that is the mechanism they use, or their certification under the Data Privacy Framework and its UK Extension where they hold one. For information about these safeguards, write to [email protected].
Changes
For material changes to this policy, we'll email account holders and display a notice on the site at least 30 days before the changes take effect. If a legal requirement or urgent security issue requires a shorter notice period, we'll explain the change as soon as reasonably possible.
We'll update the date at the top whenever this policy changes. Where required, we'll ask for your consent before using your information in a new way.
Questions: [email protected].