How Challenex handles user information

Information We Collect

We collect the information needed to run gaming profiles, matches, chats, rankings, teams, notifications, kata progression, and account security.

• Account information: name, email address, user ID, optional phone number, avatar, role, owned profile borders, kata, review totals, Terms acceptance status, and account timestamps.
• Sign-in information from Google or Discord: account name, email address, avatar, verification status, and OAuth state used to complete login.
• Session and access information: browser session records, remember tokens, API tokens, mobile session handoff codes, cookies, and Firebase Cloud Messaging tokens.
• Game profile information: game names, in-game IDs, profile names, ranks, avatars, profile category, approval status, and public profile metadata.
• Caster profile information: display name, games supported, logo, caster level, notes, social links, proof screenshots or links, and admin review status.
• Match, post, and boost information: post details, roles, requirements, notes, prices or points, participant status, team member IDs, schedule text, live stream links, proof uploads, vote timestamps, and completion records.
• Chat and social information: chat threads, messages, message images, mute settings, direct chat membership, friends, blocks, scam reports, and team invitations.
• Progress and account customization information: quest progress, owned borders, and platform records used for eligibility, ranking, and profile presentation.

How We Use Information

We use user information to create and secure accounts, authenticate web and mobile sessions, show profiles and rankings, match players and casters, run chats and teams, review caster profiles, calculate and enforce kata, send app and email notifications, prevent abuse, handle reports, and maintain the service.

What Other Users Can See

Other users may see public-facing profile information such as your name, UID, avatar, kata, review summary, game profiles, caster profile details, public posts, team membership, participant status, chat messages in shared threads, live stream links, and social links you add to a caster profile. API tokens, FCM tokens, and admin-only review data are not intended to be public.

Sharing With Services and Admins

We share information with service providers only as needed to operate Challenex, including Google, Discord, Firebase Cloud Messaging, email delivery, storage, and hosting. Challenex admins may review profile submissions, caster proof, reports, posts, kata-related records, and user records to operate and protect the platform.

Cookies, Tokens, and Local Storage

We use cookies, sessions, CSRF tokens, remember tokens, API tokens, cached OAuth state, and local browser preferences such as language to keep users signed in, connect mobile sessions, protect requests, and remember interface choices.

Retention and Deletion

We keep information while your account is active or while it is needed for platform operation, safety, dispute handling, fraud prevention, or legal compliance. You can request account deletion from account settings, in the Android app, or from the public account deletion page. The deletion flow removes the user account, sessions, chats, team links, reviews, reports, profiles, notification tokens, and stored public files that are tied to your account where the system can identify them.

Security

We use access controls, CSRF protection, token-based API authentication, validation, admin permissions, and private server-side storage controls. No online service can guarantee perfect security, so protect your own login providers and do not share sensitive account credentials in chats or posts.

Contact

For privacy questions or deletion issues, use the support or account channel provided by Challenex. We may update this policy as the service changes.