Privacy Policy

Effective October 13, 2026 · updated October 17, 2026 (lesson bookings and payments)

This policy explains what Outpost, Chess Coach Andre's online classroom (outpost.coach, "the classroom"), collects, why, who can see it, and the choices you have. The classroom is run by Andre Gorostiaga, doing business as Chess Coach Andre, on Maui, Hawaii ("we", "us"). Questions: andre@chesscoachandre.com.

In short: we collect only what's needed to teach you chess online. We don't show ads, use tracking or analytics, or sell or share your information for advertising. Your camera and voice are only recorded if you agree, and children under 13 with an account are never recorded.

What we collect

• Account details: the student's first name, an email address, and a password. Passwords are stored only in a scrambled (hashed) form that we can't read. For a child under 13, the account is created by a parent or guardian, and we also keep the parent's name. The email is the parent's.
• Lesson activity: the moves, positions, notes and chapters used in lessons, homework your coach gives you (and whether you've done it, your scores in "guess the move" homework, and any questions you send your coach about it, with their answers), positions you save, and when lessons were recorded.
• Lesson bookings: the times of lessons you book (or your coach books for you), whether they were cancelled, and your device's time zone, so lesson times show in your own time. Booking emails (when a lesson is booked or cancelled, and a reminder the day before) go to the account's email.
• Lesson recordings: when your coach records a lesson, we keep the board, the coach's camera and voice, and only if you agree the student's camera and voice (never for a child's account under 13). We also keep a note of each recording agreement: who agreed, and when.
• Video calls: calls go directly between your browser and your coach's whenever possible. Calls aren't stored unless the lesson is recorded as described above.
• Chat: chat messages exist only while people are in the classroom. They're deleted when everyone leaves and are never put in recordings.
• Technical information: your internet (IP) address is used briefly to connect calls and to limit repeated sign-in attempts. We don't keep a history of it.

How we use it

To run your lessons, keep your homework, saved positions and recordings on your dashboard, let you sign in, keep accounts secure, and contact you about your lessons. We don't use your information for advertising or sell it to anyone.

Homework emails: when your coach gives you new homework, we send a short email to the account's email address (for a child's account, the parent's) with the homework's title, any note from the coach, and a link to it. That's the only email the classroom sends. You can turn these emails off on your dashboard under "Account and privacy"; the homework still appears on your dashboard.

Who can see it

• Your coach can see your account details, lesson activity and recordings.
• You (or, for a child, the parent who manages the account) can see your homework, saved positions and the recordings of your lessons on your dashboard.
• People your coach sends a recording link to. A recording of a student's own lesson only opens when signed in to that student's account (for a child's account, the parent's). For a recording that isn't linked to an account, your coach may send a private link; anyone with that link can watch it until it expires, 7 days after it was made.
• Service providers that help the classroom run, only as needed to provide it:
  • The company that hosts the classroom's servers and backup storage, which stores the information above for us.
  • Google's call-connection (STUN) service, which sees your IP address when a call starts.
  • An email delivery service (Resend), which receives the email address and the content of homework and booking emails in order to deliver them.
  • Stripe, which takes card payments for lessons and receives the email address, the lesson's price and the card details you enter on its page.
  • Google Calendar, where your coach keeps their schedule: a booked lesson is added to it with the student's first name and the lesson time.
  • A call relay service, if one is used, which carries call data (but doesn't store it) when a direct connection isn't possible.
• When the law requires it, or to protect someone's safety.

Lessons booked in the classroom are paid for by card through Stripe, a payment company. You enter your card details on Stripe's own page: we never see or keep your card number. We keep what you paid, when, and any refund. Lessons booked on chesscoachandre.com are covered by that site's privacy policy.

Cookies and storage on your device

We use one cookie, only to keep you signed in. It's strictly necessary for the site to work, so there's nothing to opt out of. We don't use advertising or tracking cookies. Your browser also remembers a few settings on your own device, such as the board colours, pieces, sound volume and the name you typed. These are never sent to us.

Children under 13

We teach children, and we follow the U.S. Children's Online Privacy Protection Act (COPPA).

• Children under 13 can only have an account created by a parent or guardian. The parent gives consent when creating it.
• We collect only the child's first name and their lesson activity. A child's camera and voice are never recorded. When a lesson is recorded, the recording has only the coach and the board.
• A child joining a lesson without an account is asked before any recording includes them, and told to ask a parent first if they're under 13. Their first name is used only during that lesson.
• Parents can review their child's information, download it, have it deleted, or stop any further collection at any time: on the dashboard ("Account and privacy"), or by emailing andre@chesscoachandre.com.

Your choices and rights

• Homework emails: turn them on or off on your dashboard under "Account and privacy".
• Recording (accounts for ages 13 and up): choose on your dashboard whether lessons may record your camera and voice. In a lesson, you can also change your answer with "Change" next to the recording notice.
• See and download your data: "Download my data" on your dashboard.
• Remove yourself from a recording: "Remove me" on your dashboard deletes your camera and voice from it.
• Delete your account: "Delete my account" on your dashboard deletes your account, saved positions, and your camera and voice in every recording.
• Correct something: email us.

Depending on where you live (for example California), you may have further rights to know, correct or delete your information. You can use all of them through your dashboard or by emailing us, and we won't treat you differently for doing so. We don't sell or share personal information as those laws define it.

How long we keep it

Account information and saved positions are kept until you delete your account. Recordings are deleted automatically one week after the lesson, unless your coach chooses to keep one longer. They're deleted sooner if you remove yourself, you delete your account, or your coach deletes them. Copies in backups are cleared as those backups are replaced.

Keeping it safe

The classroom uses encrypted (HTTPS) connections, scrambled passwords, limits on repeated sign-in attempts, and private links that can't be guessed. Only your coach can manage it. No system is perfectly secure, but if something ever went wrong that affected you, we'd tell you.

Changes

If this policy changes, we'll update the date at the top. If the change is important, we'll ask you to review and agree again the next time you sign in.

Contact

Andre Gorostiaga, Chess Coach Andre, Maui, Hawaii · andre@chesscoachandre.com