Privacy Policy
Your games, scores and settings in the Chrome extension stay on your device. We keep your email address only if you create an account. Error reports are off unless you turn on one switch, "Send error reports". We never sell your data and never show ads. You can delete your data at any time.
1. Who we are
Skillwik runs the Skillwik website at www.skillwik.com, the Skillwik learning web app (Chess, Sudoku and Mental Math) and the Skillwik Chess & Games Chrome extension. For the Digital Personal Data Protection Act, 2023 (DPDP Act), Skillwik is the data fiduciary. Where other laws use the word, we are the controller of the personal data described here.
Address: Ground floor, 3-158, Middle Street, Swamythoppu, Kamarajapuram, Suchindrum, Kanniyakumari, Tamil Nadu 629704, India. Email: info@skillwik.com. Phone: +91 7306812819.
2. The short version
- In the Chrome extension, your games, scores and settings stay on your device.
- We keep your email address only if you create an account.
- Error reports are off by default. We receive them only if you switch on "Send error reports" in Settings. There are no separate usage-analytics reports.
- If you buy Pro, you pay on Razorpay. We never see or store your card or UPI details.
- We never sell or rent your personal data and we never show ads.
- You can delete your account in the extension or by email, at any time.
3. Laws that apply
We follow the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the DPDP Act, including its rules as they come into force. If you use Skillwik from the European Union or the United Kingdom, we also respect the GDPR and UK GDPR rights that apply to you.
4. What data we collect
We collect only what we need to run Skillwik. This is the full list:
- Email address, only when you create an account. We use it to send you a one-time sign-in code and to recognise your account.
- Account and plan data: your plan status, and your trial start and end dates if you start the free trial.
- Free trial protection data, only if you start the trial: a hashed (scrambled, one-way) device ID, a hashed copy of your email address and a hashed copy of your network (IP) address. They let us give one trial per person. We cannot turn them back into your email address or device. We also refuse trials for known throw-away email domains.
- Game and learning data on the website and web app: saved games and moves, lessons, practice, hints, undo, mistakes and review evidence, and the Skill Memory built from them.
- Device and security data on the website: IP address, browser type, time of access and error logs, used to keep the service secure and working.
- Anonymous error reports, only if you switch on "Send error reports" (off by default): the app version, whether the error happened in the popup or the full tab, where in the code it was caught, the error name and message, and a short list of code locations (function and file names with line numbers). Emails, links, sign-in tokens and chess positions are removed from the message before it leaves your device, and again on our server. A report holds no account, email address, device ID, game content, moves or browsing information, and has no persistent identifier. Each session sends at most 5 reports.
- Payment confirmation, if you buy Pro: we receive confirmation that your plan is active and the payment reference. We do not receive your card or UPI details.
- Messages you send to us, and our replies.
5. What stays on your device
The Chrome extension saves games in progress, best scores, settings, lessons you have learned, hint counts and a short log of how fast the window opened (the last 20 times, numbers only) in your browser's extension storage. This stays on your device and does not leave it. While you sign up, it also keeps the email address you typed and when you asked for a code (never the code itself) for 10 minutes. If you signed up, your email address, a sign-in token and your plan status are also kept there. You can export or delete all of it in Settings, then Privacy.
6. What we do not collect
The extension does not collect your browsing history, the content of web pages, your location, contacts, microphone or camera, or anything from other websites. It has no access to the sites you visit. It asks the browser for one permission only: storage.
7. Why we use data
- To give you the service you asked for: sign you in, save your progress, run the games and give you the plan you paid for.
- To keep the service secure, stop abuse (including repeat free trials) and fix faults.
- To find and fix errors in the extension, only if you switch on "Send error reports". This is based on your consent, and you can withdraw it at any time with the same switch.
- To keep invoices and tax records and to answer lawful requests from authorities.
9. No sale, no ads
We do not sell or rent personal data. We do not share it for advertising. We may disclose data if the law or a court requires it.
10. Data stored outside India
Some of our providers may store or process data in other countries. We use providers that protect data to a good standard, and we send them only what they need. India's law allows transfers except to countries the government restricts.
12. How long we keep data
- Account data is kept while your account exists, and removed when you delete the account.
- Free trial protection data (the hashed device, email and network values and the trial dates) is kept for one year after the trial ends, even if you delete your account. This is the only way to stop repeat trials. After one year it is removed.
- Error reports (opt-in only) are kept for up to 30 days, at Sentry or, while Sentry is not connected, on our own server.
- Short-lived counters that limit how often sign-in codes can be requested use keyed hashes that cannot be tied back to you. They are removed within a day.
- Invoices and payment records are kept for as long as tax and accounting law requires.
- Support messages are kept while we need them to help you, and for a reasonable time after.
13. Your rights
Under the DPDP Act, and under other laws where they apply to you, you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct or update data that is wrong or incomplete;
- ask us to erase your data, unless the law requires us to keep it;
- withdraw your consent, for example for error reports, at any time with the "Send error reports" switch;
- nominate another person to use your rights if you die or cannot act for yourself;
- complain to our grievance officer, and then to the Data Protection Board of India.
14. How to use your rights and delete your data
In the extension, open Settings, then Account and Pro, and press Delete account. This removes your email address, your sign-in sessions, your plan record, your consent record, the friend rooms you hosted, your places in other rooms and the chat messages you sent from our servers. Deletion cannot be undone. Games saved on your device are not affected, and you can clear them in Settings, then Privacy.
You can also email info@skillwik.com from the address you signed up with, with the subject "Privacy request". We may need to check who you are first. We will reply within 30 days at the most. The only data we keep after deletion is the data the law requires and the free trial protection data described in section 12.
15. Children
The Chrome extension is not directed to children under 13, and sign-up asks you to confirm that you are 13 or older. If you are under 18 and live in India, a parent or guardian must agree to your use of Skillwik and to this policy. We do not track children for advertising, and we never show ads. A parent or guardian can email us to see or delete a child's data.
16. Security
We use encrypted connections, hashing for sensitive values, and limited access to personal data. No internet service can promise absolute security, so please choose a private device and keep your email account safe. If a personal data breach affects you, we will tell you and the authorities as the law requires.
17. Friend rooms (version 0.7.0 and later)
Friend rooms need a free account. When you create or join a room, our server keeps the room: its 6 character code, the game, the moves, the name you typed for the room, your role (host, player or watcher) and the last 50 chat messages. Other people in the room see your room name, your moves and your chat messages; they never see your email address. Moves and messages reach them through our real-time service (Supabase Realtime), signed by our server.
A room is deleted when the host closes it, 30 minutes after the last activity, 5 minutes after the host leaves, or at the latest after 6 hours, and its chat goes with it. Muting someone only hides their messages on your device.
If you report someone, we keep the room code, their room name, the reason and copies of up to 10 of their recent messages for up to 90 days so we can review it. Counters that limit how often you can create or join rooms are keyed hashes and are removed within a day.
18. Grievance officer
If you have a complaint about how we handle your data, or a request under section 13, write to our grievance officer: Anisha Rajamurugan (Proprietor and Grievance Officer), info@skillwik.com, +91 7306812819. We will acknowledge your message within 2 business days and reply with a solution within 30 days at the most.
19. Changes to this policy
If this policy changes in a way that matters, we will tell you on the website and inside the extension before the change applies. The date at the top shows the latest version.
20. Chrome Web Store limited use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension does not use Google user data.
21. Contact
For privacy questions or requests, email info@skillwik.com or call +91 7306812819. See also our Contact page.