Privacy Policy

Effective July 28, 2026

1. Who we are

Learn Xiangqi is operated by SproutVest, LLC, a Washington limited liability company doing business as Learn Xiangqi ("Learn Xiangqi", "we", "us", "our"). This policy explains how we handle personal information on learnxiangqi.com and its related services.

2. Information we collect

Information you give us

Email address

Collected only if you create an account. It identifies your account, allows you to sign in, and lets us send password-reset messages.

Password

Stored only as a salted PBKDF2 hash. We never store, log, or have access to your password in readable form, and we cannot recover it for you — we can only help you reset it.

Skill level and play record

Your selected AI difficulty (初级 / 中级 / 高级) and a small tally per difficulty: games played, won, lost, and how many moves the coach flagged as blunders. If you are signed in, this is stored on our servers so it follows you to your other devices.

Questions you type into the coach

If you use the optional "Analyze" panel, anything you type into it is sent with your board position to Anthropic. See section 3.

Information collected automatically

On-device storage

If you play without an account, your difficulty setting and play record are stored only in your browser (localStorage) and are never transmitted to us. Clearing your browser data removes them. Games in progress are never sent anywhere on their own.

Session cookie

When signed in, we set one strictly necessary cookie. It is HttpOnly and cryptographically signed, is not readable by scripts, and is used solely to keep you signed in. We set no other cookies.

Analytics

We do not use Google Analytics or any other third-party analytics or advertising service, and we do not track you across sites.

Server logs

Our hosting provider processes standard request data, including IP address and user agent, to deliver the service and protect it from abuse.

3. Claude analysis (what leaves your device)

The game itself — the rules engine, the AI opponent, and the coaching feed that narrates your moves — runs entirely in your browser. Nothing about your game is transmitted to us or to anyone else while you play.

The "Analyze" panel is different, and is the one place where game data leaves your device. Only when you press "Analyze", we send the following to Anthropic, PBC for processing by the Claude API:

• a text rendering of the current board position;
• the list of moves played so far in the current game;
• whose turn it is; and
• any question you typed into the panel.

We do not send your email address, account identifier, or IP address to Anthropic with that request. Anthropic processes the request to generate the advice you see and handles it under its own terms; through our commercial API access, Anthropic does not use the content of these requests to train its models. Anthropic's privacy policy is available at anthropic.com/legal/privacy.

Analysis requires an account and is subject to a daily limit per account, which we count so we can keep the feature available and affordable. If you never press "Analyze", nothing is ever sent to Anthropic.

4. How we use information

• To provide the service: your account, your difficulty setting, and your play record across devices.
• To generate coaching analysis when you request it.
• To send transactional email you request, such as password resets. We do not send marketing email.
• To keep the service secure, prevent abuse, enforce usage limits, and diagnose faults.

Where the UK GDPR or EU GDPR applies, our legal bases are performance of a contract (running your account and producing the analysis you ask for), legitimate interests (security, abuse prevention, and fault diagnosis), and consent where required.

5. Service providers

We do not sell personal information and we do not share it for cross-context behavioral advertising. We rely on a small number of processors:

We may also disclose information if required by law, or to protect the rights, safety, or property of our users or ourselves.

6. Data retention

We keep your account, skill level, and play record until you ask us to delete them. When you request deletion, we remove your account and associated data within 30 days, except where we must retain something to comply with a legal obligation. Data stored only on your device is under your control and can be cleared at any time by clearing your browser data.

7. Your choices and rights

You can play, choose a difficulty, and keep a play record without ever creating an account. To access, correct, or delete account data, email us at [email protected].

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of California may request disclosure of the categories of personal information collected and its deletion; we do not sell or share personal information as those terms are defined under California law, and we will not discriminate against you for exercising any right. Residents of the UK or EEA may also lodge a complaint with their local supervisory authority. We respond to verified requests within the time required by applicable law.

8. Children

Learn Xiangqi is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

9. Security

All traffic is served over HTTPS. Passwords are stored only as salted PBKDF2 hashes, session cookies are HttpOnly and signed, and changing your password invalidates existing sessions. No system can be guaranteed perfectly secure, but we aim to hold only what the service actually needs.

10. International transfers

We are based in the United States and our providers process data in the United States and other countries. If you access the service from outside the United States, you understand that your information will be processed there.

11. Changes to this policy

We may update this policy from time to time. We will change the effective date above and, for material changes affecting your rights, take reasonable steps to notify account holders.

12. Contact

Questions or requests about privacy: [email protected]