How well does Chess.com protect our privacy?

Sort:
Knightly_News

Does anyone know how carefully chess.com protects our financial and personal data, and ensures that our chess handles are anonymous?  I want to challenge certain people to chess without giving them my personal demographics or information. Can I do this with a strong assurance that chess.com is meticulously careful with their member's data and maintains state of the art and up-to-date cyber security precautions?

HorsesGalore

If you wanted to know inner workings of the US Congress, would you ask the general citizenry or would you contact your local Senators and congressman to find out the best process in getting bills thru Congress ?    If you even wanted to know how safe your local drinking water is, would you ask others in your community or the water company to supply results of tests they must conduct to meet quality standards ?

Bottom line is people on this site can give you their opinions.   how do you know they are facts ?   you should ask chess.com ( my opinion ).

richb8888

why are you so paranoid

MikeCrockett

just exactly how do you define privacy anyway? the moment you give a machine any information about yourself you've already lost control of it.

Thomas9400

Run a vpn never use your real name case solved

MikeCrockett

so you're reduced to guile, deception and dishonesty all in the name of privacy. I'd rather keep it simple and not give the machine anything I don't want the public to know.

EscherehcsE

We can make a few guesses and assumptions, but the details would have to come from the employees/owners.

Passwords & e-mail addresses: It doesn't seem to be state-of-the-art here, since you can get your password reset via an "in-the-clear" e-mail. Also, you can log in via facebook, which I'm sure can't help security. Also, as far as I remember, they don't state how long your password can be and how it's stored on their servers.

Financial data: SSL Labs shows three secure servers associated with Chess.com. Two are graded A-, and one is graded C in terms of SSL security. I don't know which server(s) hold the financial data. They also don't state exactly how the financial and password information is stored on the servers (whether it's encrypted, the encryption algorithms, etc.)

Privacy policy: Seems to be fairly boilerplate as far as I can tell, which basically means you have to trust in the honesty of the employees who handle your personal information.

I did notice this statement:

"If we are involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, your information may be sold or transferred as part of that transaction. You acknowledge that such transfers may occur, and that any acquirer of Chess.com or its assets may continue to use your Personal Information as set forth in this Privacy Policy. If any acquirer of Chess.com or its assets will use your Personal Information contrary to this Privacy Policy, you will receive prior notice."

Thomas9400
MikeCrockett wrote:

so you're reduced to guile, deception and dishonesty all in the name of privacy. I'd rather keep it simple and not give the machine anything I don't want the public to know.

Mike i suggest you change your username btw just based of your chesss.com acount people know your full name, have a picture of you, and know you live in the united states the rest of your info would be very easily compromised

MikeCrockett

thanks for the suggestion but my name and face are already public information. with that said what else do you know about me?

MikeCrockett

I agree pretty much with what you say here. even if I choose not to provide information to a machine, that doesn't mean others won't. even the government can't keep secrets. fill out a tax return, it will end up on a computer where someone can steal it. with that said it takes a determined thief to acquire that type of data. the casual stuff most people voluntarily surrender. if you're concerned about privacy, stop giving it away. I closed my Facebook because anything I posted became their property. they could use it without my consent. i can't stop others from revealing information about me, but whatever gets revealed is hearsay, conjecture or rumors.

Knightly_News
HorsesGalore wrote:

If you wanted to know inner workings of the US Congress, would you ask the general citizenry or would you contact your local Senators and congressman to find out the best process in getting bills thru Congress ?    If you even wanted to know how safe your local drinking water is, would you ask others in your community or the water company to supply results of tests they must conduct to meet quality standards ?

Bottom line is people on this site can give you their opinions.   how do you know they are facts ?   you should ask chess.com ( my opinion ).

@EscherEhcse was an example of an excellent opinion, and yes, I want to  bring attention to the issue, because a lot of sites are reckless with cyber security and I prefer do business with those who take that responsibility seriously and are careful.  So I was curious but it was also a rhetorical question.