Privacy Policy
1. Scope and contact
This policy covers Magic Wizard Chess (魔法巫师棋), provided by individual developer Moore.Z, and the Wizard Chess page hosting this policy. Features differ by platform, device and test build. The processing described below occurs only when the relevant feature is available and used.
Privacy contact: zhangchen.moore@gmail.com. Contact the developer here with privacy questions or requests to access, correct or delete information relating to this service.
2. Games, preferences and local data
Ordinary chess rules and computer calculations run on your device. Playing and Google Play purchases do not require a separate Wizard Chess account. Optional account features support Google sign-in or email registration, private records, growth and medals. Google sign-in shares an account identifier and the identity information needed to verify your sign-in; we never receive your Google password. Email registration stores an email address and a password hash, not a readable password. Session credentials are protected in native encrypted storage.
When you use signed-in personal records, the app sends completed game records and move sequences over HTTPS to our player service to validate games, synchronize records, calculate growth and award medals. Records are associated with an internal player ID and an installation ID. Language, game state, preferences, cached entitlements, video downloads and undo/ad credits also remain on-device. Operating-system backups may include eligible local data. Apple AR trial Keychain records are device-only and may survive uninstalling.
The weekly practice board is optional. Joining lets other signed-in players see your nickname, weekly points and rank. Your email address, Google identifier and private move sequences are not displayed on the board. Leaving hides your entry; it does not delete private records or earned growth. The board measures practice activity, not verified competitive skill.
3. Purchases and paid downloads
In versions with store purchases enabled, the relevant store, such as Google Play or Apple App Store, handles payment. We do not receive your payment card number, banking password or store account password.
Android purchase verification sends Google Play purchase tokens over HTTPS to our verifier, which checks and acknowledges the purchase with Google. The server stores a SHA-256 digest of the token, verified products and verification time for entitlement management, fraud prevention, repeat-request handling and revocation checks. The app also keeps purchase records needed for restoration and offline entitlements locally. The original token is processed in verification requests, but is not written to the verifier's entitlement files.
Apple versions with purchases enabled process product identifiers, transactions and entitlements to verify and restore purchases. Current Apple test payments use device-side StoreKit and are not connected to our Apple server-side order verifier. This policy will be updated before new server-side processing is introduced.
Paid video downloads process purchase proof or an internal test download authorization, short-lived download tickets, requested resource identifiers and network information needed for the connection. Alibaba Cloud provides video storage and delivery. Downloaded videos are cached on your device. This feature does not upload camera footage or your private videos.
4. Optional rewarded advertising
Android includes Google's AdMob / Google Mobile Ads SDK and User Messaging Platform (UMP). The SDK initializes and requests an ad when you choose to watch a rewarded ad. Completing an ad can grant in-game undo credits, recorded locally. Internal builds may use Google's official test ads; this does not mean the SDK processes no network or device data. The current Apple test version does not include this advertising SDK.
Google states that its SDK may process IP addresses (which may infer approximate location), device or account-related identifiers such as advertising and app set IDs, ad and product interactions, and performance or diagnostic data for advertising, measurement and fraud prevention. We do not request precise GPS location for this purpose or receive Google's complete advertising profiles.
Live-ad builds provide privacy choices according to applicable regional and Google requirements. Where required, use “Ad privacy settings” in the app to revisit them. System settings also offer controls for advertising identifiers and permissions. Non-personalized ads may still process data for basic delivery, measurement and fraud prevention. Declining or cancelling an ad does not prevent ordinary chess, but an unfinished ad does not grant its reward.
See Google's Privacy Policy, how Google uses information from partners, and SDK data disclosures.
5. AR camera and device permissions
AR chess on supported iPhone/iPad builds requires camera permission. ARKit uses camera frames, device motion and environmental planes on-device to detect a surface, place the board and track your viewpoint. The current version does not upload AR camera frames, environment maps or plane data to our servers. It does not perform face recognition or face tracking, or request microphone, contacts or GPS location permission.
You can deny or revoke camera permission in system settings and continue playing ordinary chess. Android background video downloads may request notification permission to display progress and use a background download service; notifications are not used for marketing. Caches are written inside app storage, without requiring access to your photo library or other apps' files.
6. Network information, this website and support email
Viewing a page, verifying a purchase or downloading a resource requires network services to process connection information such as IP address, request time and path, browser or device request headers and error status. This supports delivery, operation, abuse prevention and troubleshooting. Infrastructure may generate necessary operational or security logs. Our purchase and download application logs do not record raw purchase tokens or complete authorized download URLs.
This privacy page installs no ads, third-party analytics, tracking cookies or external fonts and requires no login. The game primarily uses local storage for preferences, rather than cross-site tracking cookies.
If you email us, we receive your email address, message and any attachments you choose to send, to answer questions and handle requests. Do not send passwords, verification codes, full payment card details or raw purchase tokens. Your platform, app version and a description of the issue are usually sufficient.
7. Recipients and processing locations
We do not sell personal information. For enabled features, relevant information may be processed by Google (store verification, ads and consent management), Apple (store transactions, AR and system services) and Alibaba Cloud (hosting, networking and video storage). They also process data they collect directly under their own policies:
Our current purchase verifier is in Singapore. Video authorization and storage services are in mainland China (Hangzhou). Providers may also process information in other regions where they operate. Network features can therefore involve international processing. We protect transmission and server records with measures including HTTPS and restricted access. We may disclose necessary information when legally required, to protect users and service security, or to handle disputes.
8. Retention and deletion
Local preferences, games and caches remain until overwritten, cleared or removed with the app. System backups and Keychain records may remain under system rules; uninstalling does not guarantee deletion of all such records. AR trial records maintain continuity of trial usage. Store transaction records are managed by the store: uninstalling or deleting our records does not delete store orders or constitute a refund.
Server entitlement digests and verification records are retained as needed to maintain permanent purchases, support restoration and address fraud or transaction disputes. Currently these entitlement records are not automatically deleted after a fixed number of days. Necessary operational logs and support correspondence are kept only as needed for operation, security, requests and applicable legal obligations, then deleted or de-identified. Third-party advertising and store retention follows their policies.
To request deletion of server records under our control or ask about retention, email the contact above. We verify the relationship between the request and the relevant purchase using the minimum information needed, and explain any records that must legally be retained or how deletion may affect purchase restoration.
9. Choices and privacy rights
You can play ordinary offline chess without entering AR, downloading paid resources or watching ads. App and system settings let you control language, audio, permissions, advertising choices and local data.
Depending on applicable law in your region, you may have rights to access, correction, deletion, restricted processing, objection, a copy of your data or withdrawal of consent, and to complain to a data protection authority. Send requests to the privacy email. We respond within applicable legal deadlines and do not discriminate for making a privacy request. Withdrawal does not affect prior lawful processing. Stopping processing required for a network feature may make that feature unavailable.
10. Children, changes and effective date
The app is intended for a general audience and is not an advertising service specifically designed for children. Users below the local age for independent consent should use it with guardian guidance; guardians should supervise purchases and ads. Children can use ordinary offline chess. Where local law requires guardian consent, a guardian should oversee any use of online account features. Optional usage statistics and the current rewarded-ad flow are not enabled for children or unknown-age users. Contact us to request removal of a child’s account information. Store age ratings, parental controls and ad privacy choices apply according to the actual release and region.
Last updated and effective: October 20, 2026. Changes are published here. Material changes to processing will also be communicated in the relevant feature or app where required. Online multiplayer, cloud saves or other new processing are not enabled merely by this policy.
Optional usage statistics
Optional usage statistics require adult confirmation and a separate opt-in. Refusing or withdrawing does not prevent chess, purchases, personal records, growth or the weekly board. If enabled, the service processes an installation identifier, session identifier, app version, language, device/layout category, event times and allowlisted activity events (such as opening a screen, playing, reviewing, purchase-flow status, sharing invocation and resource errors). It does not collect passwords, payment card details, advertising identifiers or screenshot contents through this statistics feature. Event data is retained for up to 90 days. Withdrawal stops local collection and requests deletion of this installation’s statistics; an offline deletion request retries when connected. You can change this choice in Account and data settings.
Request account and data deletion
For Magic Wizard Chess by Moore.Z, email zhangchen.moore@gmail.com with the subject “Magic Wizard Chess account deletion”. State the email address used for sign-in and that you want your account and associated data deleted. You can make this request without installing the app. Do not send passwords, verification codes or purchase tokens. We will verify account ownership using the minimum necessary information before processing the request.
Account deletion removes the account identity, profile/nickname, private game records, growth and medal records, weekly-board records and associated usage statistics under our control, and invalidates sign-in sessions. Until a deletion request is fulfilled, account records remain available for the features you use; uninstalling alone does not delete them. We respond within applicable legal deadlines and explain any necessary verification or retention. Restricted backups may retain copies until replaced. Necessary purchase-verification and anti-fraud records may be retained to support permanent purchase restoration, disputes or legal obligations. Deleting the Wizard Chess account does not delete your Google account or Google Play orders and is not a refund request.