Privacy policy
2 September 2026
1. Data controller
- Controller: Alberto Quintin Navarro, a natural person, with no economic activity attached to this site.
- Contact: [email protected].
2. Summary
The Luft application has no user accounts, analytics, telemetry, advertising or crash reporting. The website likewise has no accounts or forms, and it measures visits —with Google Analytics— only if you accept in the notice shown on arrival; if you decline, nothing from Google is loaded and the site works just the same. Beyond that, the site processes the technical data unavoidable when serving pages and downloads, and the data you send yourself if you write to the contact address.
The application stores your databases, games and settings on your computer and does not send them to the owner. It does make the specific connections described below; none transmits your databases or the contents of your games.
Application connections
- Games from a Lichess account: when you request it, Luft queries
https://lichess.org/api/games/user/with the username and filters you entered. Luft uses no account, session or token, and the query is not repeated in the background. - Version check: once at startup, Luft queries
https://luftchess.app/releases/latest.json. As with any web request, the server receives the IP address and technical connection data. If an update is available, Luft informs you and downloads or installs nothing without your confirmation.
Any UCI engines you install are independent programs and may have their own connections and policies. Luft’s interface cannot access the network; the connections above are made by the application’s native component.
3. What data is processed, why and on what basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Serving this website (hosted on Cloudflare Pages) | IP address, user agent, requested page, date and time, in server logs | Deliver the pages and protect the service against abuse and attacks | Legitimate interest (art. 6(1)(f) GDPR): security and operation of the site | As set by Cloudflare for its security logs (normally days) |
| Downloading installers and the database (hosted on GitHub) | IP address and technical request data | Deliver the files | Legitimate interest: providing the requested download | As per GitHub’s policy |
| Contact by email | Your email address, your name if given and the content of the message | Reply to your enquiry | Legitimate interest (art. 6(1)(f) GDPR) in handling the communication you initiate | For the duration of the conversation and at most one year afterwards, unless legally required otherwise |
| Site usage analytics (Google Analytics 4) | Random cookie identifier, pages viewed, visit source, approximate country derived from the IP address, device and browser type | Understand which content is of interest and where to steer the site | Consent (art. 6(1)(a) GDPR and art. 22.2 LSSI-CE), which you may withdraw at any time | 14 months |
No automated decision-making or profiling takes place. Data of minors is not knowingly processed.
4. Recipients and processors
- Cloudflare, Inc. (USA), hosting and delivery network for the site. See its privacy policy.
- GitHub, Inc. (USA), hosting of the download files. See its privacy statement.
- Google Ireland Limited (Ireland), site analytics, and only if you have accepted cookies. Processing may involve Google LLC in the United States under the EU-US Data Privacy Framework. See its privacy policy.
- Lichess.org, only when you ask the application for the games of an account, as described above. See its privacy policy.
Cloudflare, GitHub and Google may process data in the United States and other countries under their respective policies and international-transfer mechanisms. Beyond those providers and the Lichess requests you initiate, no data is disclosed to third parties unless legally required.
External links lead to third-party sites whose own privacy policies apply from the moment you visit them.
5. Cookies
This site uses analytics cookies (Google Analytics) only if you accept them in the notice shown the first time you visit. Until you decide, and also if you decline, no cookie is set and no Google code is loaded. Declining limits nothing: you can read and download just the same.
The details of each cookie, its duration and the control to change your choice are in the cookie policy.
Cloudflare may additionally apply technical security measures under its own policy; if those measures were to require non-exempt cookies, this text would be updated before they were deliberately used.
6. Your rights
Where applicable, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to the contact email and stating the right you are exercising. If you consider that the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.
7. Changes
This policy may be updated to reflect technical or legal changes; the date of the latest revision appears at the top of the page. Should the Spanish and English versions differ, the Spanish version prevails.