Privacy Policy

Last updated: March 26, 2026

Snap That Piece is operated by Superposition Labs Inc., a corporation registered at 1600 – 925 West Georgia Street, Vancouver BC V6C 3L2, Canada.

Snap That Piece is available as a mobile app (“the App”) and a web application at app.snapthatpiece.com (“the Web App”). In the App, all chess board recognition and piece identification happens entirely on your device. The App does not include any tracking or analytics SDKs. The Web App uploads images to our servers for processing, as described below.

This website (snapthatpiece.com) and the Web App (app.snapthatpiece.com) use Google Analytics to help us understand how visitors find and use our products. The website and the Web App login and registration flows also use the Reddit Pixel to measure the performance of Reddit ad campaigns and successful account sign-ups. See the Website Analytics section below for details.

The App can be used in full without creating an account, providing any personal information, or sharing any images. Registration, error reporting, and training data sharing are entirely optional. The Web App requires you to create an account to use its features.

Information We Collect

Information You Provide

  • Account information (optional in App, required in Web App): If you choose to create an account via Sign in with Apple (App only), Google Sign-In, or email registration, we receive your name and email address (or a private relay address if using Apple). In the App, this information is stored securely in your device’s Keychain. In the Web App, an authentication token is stored in your browser’s local storage. Account information is transmitted to our servers at api.snapthatpiece.com for account creation, identity verification, and to associate your submissions with your account. Your email may also be used to send one-time verification codes when registering via email.
  • Error reports (optional): If you choose to submit an error report, it may include a cropped image of the detected board area and a text description you provide. Error reports are sent to our server to help improve detection accuracy. By submitting any image or content, you grant Superposition Labs Inc. a worldwide, royalty-free, sub-licensable license to use, reproduce, modify, and create derivative works from the submitted content for the purposes of training, improving, validating, and benchmarking machine learning models for chess position detection, and for internal research and development related to computer vision. You may withdraw your consent to future use of your submitted content by contacting privacy@snapthatpiece.com. See our Terms of Service for full details.
  • Training data (optional in App): In the App, if you enable the “Share Images for Training” feature in Settings, board images captured during detection are automatically sent to our servers to improve our machine learning models. You can disable this feature at any time from Settings. Training data uploads are linked to a random device identifier for upload management but are not associated with your name or email. In the Web App, all images you submit for recognition may also be used to train and improve our machine learning models. The same content license described above applies to all training data.

Information Collected Automatically

  • Device metadata (with submissions only): When you submit an error report or training data, the submission includes your device model, OS version, and app version for diagnostic purposes. This information is not collected at any other time.
  • Anonymized usage statistics: We may collect anonymized usage statistics such as feature usage frequency, session duration, and detection counts. This data is aggregated and cannot be used to identify you personally. It does not include advertising identifiers, location data, or any content you create or capture. We use this data solely to understand how the App is used and to prioritize improvements.

Web App — Image Upload and Processing

When you use the Web App to recognize a chess position, the image you provide is uploaded to our servers (hosted on Cloudflare R2) for processing. The image is used to detect the board, identify pieces, and generate a FEN string. Uploaded images are associated with your account and retained for result delivery. The same content license described above applies to images uploaded through the Web App.

The Web App stores your recognition job history in your browser’s local storage for convenience. You can delete individual jobs from the Web App interface.

Camera and Photo Library Access (App Only)

The App requests access to your device’s camera and photo library to perform chess board detection. Images are processed entirely on-device using local machine learning models. No images are transmitted to any server unless you explicitly choose to submit an error report or have enabled the training data sharing feature.

Data Storage

App

  • Positions and games: Saved on your device using local storage. Not synced to any cloud service.
  • Account credentials: Stored in the iOS Keychain, Apple’s secure encrypted storage.
  • Preferences: Stored locally in UserDefaults on your device.

Web App

  • Uploaded images: Stored on Cloudflare R2 servers. Associated with your account for result delivery and processing.
  • Account data: Name, email, and terms acceptance status are stored in our database (MongoDB Atlas).
  • Authentication token: A JSON Web Token (JWT) is stored in your browser’s local storage for session management. Tokens expire after 7 days.
  • Job history: Your recognition job history is cached in your browser’s local storage. You can clear this by deleting jobs or clearing your browser data.

Data Sharing

We do not share, sell, or transfer your personal information to third parties. When you use the "Analyze on Lichess" feature, the app opens a link to lichess.org containing the FEN string of the position. This is a standard web link – no account data or personal information is included.

Account Deletion

If you have created an account, you can delete it at any time from Settings within the App or the Web App. Account deletion removes all associated data from your device or browser, including your name, email, saved positions, and preferences.

On our servers, account deletion works by anonymization (also known as pseudonymization): your personal information (name, email address, authentication identifiers) is permanently removed from your account record. A one-way cryptographic hash of your email address is retained solely to allow you to verify prior account ownership if needed. Support tickets are deleted. One-time verification codes are deleted.

Images you uploaded and recognition results are retained after account deletion. These images are disassociated from your identity and used to train and improve our machine learning models, as described in the Data Retention section and our Terms of Service. If you wish to have your uploaded images deleted, contact privacy@snapthatpiece.com.

Children’s Privacy

The app is not directed at children under 13. We do not knowingly collect personal information from children. The app is rated 4+ and contains no objectionable content.

Website Analytics

This website (snapthatpiece.com) uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 collects anonymized data about how visitors interact with the site, including pages visited, referral source, approximate geographic region, device type, and browser. This data helps us understand how people discover and use the site so we can improve it.

This website and the Web App login and registration flows also use the Reddit Pixel, a campaign measurement tool provided by Reddit, to measure page visits and successful sign-ups associated with Reddit ads. When enabled on a page, Reddit may receive technical information such as IP address, user agent, page URL, referrer, and cookie or similar identifier data to help attribute ad-driven visits and conversions.

GA4 uses first-party cookies to distinguish unique visitors and sessions. No advertising features are enabled. We do not use Google Analytics data to identify individual visitors, build advertising profiles, or share data with advertisers. IP addresses are anonymized by Google before storage.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or by using your browser’s built-in cookie controls. You can learn more about Reddit’s privacy practices and available controls in Reddit’s Privacy Policy.

For more information, see Google’s Privacy Policy and Google Analytics’ data practices.

The App itself does not include Google Analytics or any other third-party analytics SDK. Website analytics apply only to this website.

Third-Party Services

  • Google Sign-In: If you choose to sign in with Google, the App or Web App uses Google Sign-In to authenticate you. Google may collect data according to their own privacy policy. We receive only your name, email address, and an identity token from Google.
  • Email verification (Resend): When you register via email in the Web App, one-time verification codes are sent using the Resend email delivery service. Resend processes your email address solely for delivery of the verification code. See Resend’s privacy policy.
  • Cloudflare (Web App): Uploaded images are stored on Cloudflare R2. Cloudflare may process request metadata (IP address, headers) as part of their infrastructure services. See Cloudflare’s privacy policy.
  • Google Analytics (website and Web App): Used on snapthatpiece.com and app.snapthatpiece.com as described in the Website Analytics section above. Not included in the App.
  • Reddit Pixel (website and Web App login): Used on snapthatpiece.com and on the login and registration flows of app.snapthatpiece.com to measure the effectiveness of Reddit ad campaigns and successful sign-ups as described in the Website Analytics section above. Not included in the App.
  • Analyze on Lichess: This feature opens a link to lichess.org containing the FEN position string. No account data or personal information is included in the link.

The App itself does not integrate any third-party analytics platforms or advertising networks. Outside of the website and the Web App analytics and Reddit login measurement described above, the Web App does not use third-party advertising networks.

Security

In the App, sensitive data (email, name) is stored in the iOS Keychain. In the Web App, authentication uses JWT tokens transmitted over HTTPS. All network communications use HTTPS. Neither the App nor the Web App stores or transmits passwords.

Data Retention

  • Account data (email, name): Retained on our servers while your account is active. Permanently removed (anonymized) from your account record upon account deletion. A one-way hash of your email is retained for ownership verification.
  • Error reports and training images: Retained for as long as reasonably necessary for model development and improvement. You may request deletion at any time by contacting privacy@snapthatpiece.com. Content already incorporated into trained models cannot be individually extracted.
  • On-device data (saved positions, preferences): Retained on your device until you delete them or delete your account.
  • Web App uploaded images: Retained for as long as reasonably necessary for result delivery and model improvement. You can delete individual jobs from the Web App interface.
  • Web App browser data (JWT token, job history): Stored in your browser’s local storage. Cleared when you log out, clear browser data, or when the token expires (7 days).

Your Rights Under Canadian Privacy Law

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA), you have the right to:

  • Request access to personal information we hold about you
  • Request correction of inaccurate personal information
  • Withdraw your consent to our collection, use, or disclosure of your personal information
  • Request deletion of your personal information

To exercise any of these rights, contact us at privacy@snapthatpiece.com. We will respond within 30 days.

If you are not satisfied with our response to a privacy complaint, you may contact:

  • The Office of the Privacy Commissioner of Canada: www.priv.gc.ca
  • The Office of the Information and Privacy Commissioner for British Columbia: www.oipc.bc.ca

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated revision date. Continued use of the app after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy or your data, contact us at support@snapthatpiece.com.

Superposition Labs Inc.
1600 – 925 West Georgia Street
Vancouver BC V6C 3L2
Canada