Draft pending legal review. This is not the final policy yet, and Osia Chess Kids is not open to the public.
Osia Chess Kids privacy
Version kids-2026-11-12 (draft)
Osia Chess Kids is the version of Osia Chess for children under 13, at kids.osiachess.com. It is built so a child can play chess without anyone being able to write to them or read from them: there is no chat, nicknames are made up by the game and there are only emoticons. This page explains what data we keep about the child and their guardian, why, and how to delete it.
1. Controller
Cristian Osia, under the Osia Games brand (Osia Holdings), Colombia. Email for anything about this data: [email protected].
2. What we never ask for or keep about the child
- No name, email, phone number, year of birth or photos.
- No text written by or for the child: there is no chat and no written phrases, only 8 emoticons.
- No advertising identifiers: there are no ads in Osia Chess Kids.
- No analytics with identifiers and no third-party cookies.
3. What we keep
| Data | Why | How long |
|---|---|---|
| An anonymous profile with a nickname made up by the game (for example "Blue Knight 42"). | So the child can play online and their opponents and friends can recognize them. | Until the profile is deleted. |
| Online games, Elo, friends (added with a code shared in person), blocks and game reports ("leaves the game", "does not move"). | Playing, matching by level and keeping the game fair. | Until the profile is deleted. Games stay for the opponent, without the child ("Deleted player"). |
| The sessions of each device (phone, tablet or browser), stored as an encrypted fingerprint. In the browser, the session lives in a cookie of kids-api.osiachess.com that JavaScript cannot read. | So the child stays signed in on their devices. | Until the session expires, the guardian removes the device or the profile is deleted. |
| From the guardian: a fingerprint (one-way encrypted code) of their Google account identifier. We do not keep their email, name or photo. | Recognizing the guardian when they come back to their panel. | While they have adopted profiles. |
| Proof of the guardian's consent: date and version of this policy. | Showing that the parent or legal guardian authorized the processing. | Kept even if the profile is deleted (it has no data about the child). |
4. The guardian
- Before an adult adopts the profile, the child only plays against the AI (on their device, offline) and with friends added by code.
- The adult adopts the profile at kids.osiachess.com/parent with their Google account and the code or QR shown on the child's device (valid for 10 minutes). They confirm they are the parent or legal guardian.
- From their panel, the adult sees the game history, turns "play with strangers" on or off, approves or removes devices and can delete the profile.
- One adult can have several children; each profile has a single guardian.
5. Deleting the profile
The guardian deletes it from their panel (typing the nickname to confirm). If the profile has no guardian, the child can delete it from their device. Everything in the profile is deleted right away: sessions, Elo, friends, blocks, codes and reports. Only a minimal trace is kept (a random number of the profile, who asked for the deletion and the date) to prove it was done.
You can also ask by email at [email protected].
6. Who we share data with
With nobody for advertising or for sale. The server runs on a private server behind Cloudflare (attack protection). The guardian signs in with Google Identity Services, which only gives us a token to verify their account.
7. Rights
The guardian can access, correct and delete the profile data, and withdraw consent (by deleting the profile). For any request: [email protected].