Scacelith
en

Language

Download

Choose your system

Source codeZIP archive · v1.0.0

Scacelith · All releases

Legal

Legal notice, privacy and terms of use

Who publishes and hosts Scacelith, what happens to your data on this website, in the game and on the official server, and the rules for playing there.

Last updated: 11 October 2026

Publisher
Scacelith is published by a private individual, on a non-professional basis. As French law allows (article 1-1 II of law no. 2004-575 of 21 June 2004), the publisher's identity is not shown here; it is known to the hosting provider.
Contact
contact@scacelith.com
For any question about this website, the official server or your data.
Official game server and account data
OVH SAS
2 rue Kellermann, 59100 Roubaix, France
Phone +33 9 72 10 10 07 · ovhcloud.com
Servers in France.
This website and the API documentation (GitHub Pages)
GitHub, Inc.
88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, United States
Phone +1 877 448 4820 · github.com
Domain name registrar
Porkbun LLC
21370 SW Langer Farms Parkway, Suite 142-429, Sherwood, OR 97140, United States
Phone +1 855 767 5286 · porkbun.com
Licence
The game and its server are free software under the GNU General Public License v3, with public source code:
the game · the server

Scacelith shows no advertising, sells no data and measures no audience. Personal data is used only to run this website and the official server, as described below. The controller is the publisher, reachable at the contact address above.

On this website

  • GitHub hosts the site and, like any web host, records visitors' IP addresses for security purposes. GitHub's privacy statement
  • To show the newest release, your browser asks GitHub's API (api.github.com); to show the server's status, the leaderboard, players and your account, it asks the official server (caissa.scacelith.com). Both receive your IP address, as with any request.
  • The site sets no cookies and has no analytics. It keeps in your browser only your choice of language and, once you sign in, your session: for the current tab only, or on this device if you tick “Keep me signed in”. A Google sign-in also keeps its one-time codes in the current tab until they are used. All of this is needed for the site to work, and only the official server receives the session and the codes.
  • The trailer is a YouTube video. Nothing is loaded from YouTube until you press “Accept and play”; YouTube (Google) then receives your IP address and may store cookies or other trackers on your device. Your answer is not remembered: the question comes back at your next visit. Google's privacy policy
  • “Sign in with Google” on the Account page loads nothing from Google until you press it. Your browser then goes to Google's sign-in page (accounts.google.com), and Google sends it back to this site with a one-time code that the site hands to the official server. Google receives your IP address and what you enter on its page, under its own policy. Google's privacy policy

In the game

The game keeps its settings, your local results and your sign-in on your computer. The sign-in is kept in the system's secure store: DPAPI on Windows, the Keychain on macOS, the Secret Service keyring on Linux, or else a file that only your user account can read.

It sends nothing on its own: no telemetry, no update check. It connects to the official server only when you open the online page, to Hugging Face only when you download the coach's voice, and, for a direct match, to your opponent's computer, which then knows your IP address (the game may also open a port on your router with UPnP).

Your account on the official server

Creating an account, in the game or on this website, and playing online send the following data to the official server, hosted by OVH in France:

  • Account: user name, e-mail address, password (stored only as an Argon2id hash), two-step verification secret (encrypted) and recovery codes (hashed), sign-up date and date of last sign-in.
  • Sign in with Google: Google sends your Google account identifier, your e-mail address and your name. The server keeps the identifier and the address, and uses the name only to suggest a user name.
  • Signed-in devices: for each sign-in, the name of the device (the game's version and system, such as “Scacelith/1.0.0 win64”, or the browser and system for this website), the IP address and the dates of use.
  • Games and ratings: every online game (players, moves, time spent on each move, result, dates) and your ratings. During a game, the movements of your head and hand are relayed live to your opponent and never stored.
  • Security log: sign-ins, failed attempts and changes to the account, with the IP address.
  • Fair play: reports filed by you or about you, with their comment; abandoned and missed games; sanctions; and the checks run on games, from forged or impossible moves to statistics from the Stockfish engine.

Why, and on what legal basis

  • Running your account and online play (sign-in, matches, ratings, game records, the e-mails the service sends): the service you sign up for (article 6(1)(b) GDPR).
  • Protecting accounts and the server, and keeping games fair (security log, IP addresses, fair-play checks, sanctions): the legitimate interest of the publisher and of the players (article 6(1)(f) GDPR).
  • Playing the trailer from YouTube: your consent, given with the button (article 6(1)(a) GDPR).

What everyone can see

Your user name, sign-up date, ratings and full list of games, with every move, are public: on this website, through the server's API and in each game's PGN. Your e-mail address, devices, sign-ins, sanctions and fair-play records are never shown. You can refuse direct challenges, but games cannot be hidden.

Automatic decisions

Some breaches of the game's protocol, such as a forged message or a move that is impossible in the position, are certain proof of cheating: the server then forfeits the game, bans the account for 24 hours, removes it from the leaderboard and gives back the points its opponents lost to it in the last 60 days. Three games abandoned, aborted or missed in 24 hours pause rated matchmaking for 15 minutes, then longer. Engine statistics never lead to a sanction on their own: a person decides. You can ask for any decision to be reviewed at the contact address.

Who receives your data

  • OVH SAS hosts the server and its data, in France.
  • Scaleway SAS (8 rue de la Ville-l'Évêque, 75008 Paris, France) sends the server's e-mails: it receives your address, your user name and the message.
  • Google receives what your browser sends it when you choose to sign in with Google, under its own privacy policy.
  • The server's administrator and moderators see account and fair-play data to run the service.
  • Other players see what is public, and your opponent sees your moves and movements during a game.
  • No one else: no data is sold, rented or used for advertising.

Account data stays in France. GitHub, Google and Porkbun (which forwards messages sent to the contact address) are based in the United States: what they receive falls under their own policies and their safeguards for transfers out of the European Union.

How long it is kept

  • Account: until you delete it. A sign-up whose address is never confirmed is deleted after 24 hours.
  • Signed-in devices: until you sign out, after 30 days without use, and after 90 days at most.
  • IP addresses: erased after 30 days. The server's logs keep only shortened addresses.
  • Security log: 90 days.
  • Abandoned and missed games: 30 days.
  • Games and ratings: as long as the server keeps its game records, which are also your opponents' records. Once your account is deleted, your name in them is replaced by “deleted#” and a number.
  • Sanctions, reports and fair-play results: kept, so that banned players cannot simply come back and other players stay protected. Once your account is deleted, they remain linked only to its number.
  • Backups: deleted data can remain for a short time in the server's backup copy, until it is replaced.
  • Messages to the contact address: as long as needed to answer them.

Your rights

You can access, correct, erase and export your data, restrict its use and object to it (articles 15 to 21 GDPR).

Most of this is in your account, in the game or on this website's Account page: download your account data as a JSON file, change your e-mail address or password, sign out other devices, or delete the account at once. Account

An account created with Google has no password: to export or delete it, first give it one with “Forgot password?”.

For anything else, including data the export does not contain (fair-play checks, reports about you), write to the contact address. You will get an answer within one month. contact@scacelith.com

If you think your rights are not respected, you can lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or with the data protection authority of your country. cnil.fr

These terms apply to the official server (caissa.scacelith.com) and to the account pages of this website. Creating an account or playing on the official server means accepting them.

  • A free service. The game is free software, free of charge. The official server is offered free of charge and as is, with no guarantee of availability: it can change, stop for a while or close.
  • Your account. You are responsible for what is done with it and for keeping its password secret. Write to the contact address at once if you think someone else uses it.
  • Your user name is public: it must not be offensive or hateful, impersonate someone or reveal anyone's personal data.
  • Fair play. During a rated game, no help from a chess engine, another person or any other tool. No modified game client, forged messages or deliberate overloading of the server.
  • Finish your games. Abandoning or aborting games, or missing games you were matched for, three times in 24 hours pauses rated matchmaking for a while.
  • Reports must be made in good faith. To report a player or illegal content, such as an offensive user name, use the report button of a game or write to the contact address.
  • Sanctions. Breaking these rules can lead to a forfeit, a warning, a ban and removal from the leaderboard; points lost to a cheater are given back to their opponents. Only certain proof of cheating is sanctioned automatically; anything else is decided by a person. You can contest a sanction at the contact address.
  • Liability. Within the limits allowed by law, the publisher is not liable for interruptions of the service or for the loss of games, ratings or data.
  • Ending. You can delete your account at any time. An account that breaks these terms can be banned.
  • Changes. These terms can change; the date at the top of this page shows the current version, and playing on after a change means accepting it.
  • Law. These terms are governed by French law. In case of a dispute, write first to the contact address to find a solution together.

This page exists in several languages; if they differ, the French version prevails.