How Challenex handles user information

Information We Collect

We collect the information needed to run gaming profiles, matches, chats, rankings, teams, payments, notifications, and account security.

• Account information: name, email address, user ID, optional phone number, avatar, role, premium status, wallet balance, kata, review totals, and account timestamps.
• Sign-in information from Google or Discord: account name, email address, avatar, verification status, and OAuth state used to complete login.
• Session and access information: browser session records, remember tokens, API tokens, mobile session handoff codes, cookies, and Firebase Cloud Messaging tokens.
• Game profile information: game names, in-game IDs, profile names, ranks, avatars, profile category, approval status, and public profile metadata.
• World of Warcraft information: Battle.net OAuth tokens and region, character name, realm, level, race, class, spec, faction, average item level, avatar URL, signup settings, selected join roles, payment settings, premium refresh status, kata, and raw Battle.net profile data used by the app.
• Raider.IO information for WoW join profiles: profile URL, current role scores for tank, healer, and DPS, average item level, minimum equipped gear item level, crawl time, and fetch time. This is fetched when missing so join profile data can be shown and used consistently.
• Caster profile information: display name, games supported, logo, caster level, notes, social links, proof screenshots or links, and admin review status.
• Match, post, and boost information: post details, roles, requirements, notes, prices or points, participant status, team member IDs, schedule text, live stream links, proof uploads, vote timestamps, and completion records.
• Chat and social information: chat threads, messages, message images, mute settings, direct chat membership, friends, blocks, scam reports, and team invitations.
• Payment and credit information: deposit and withdrawal requests, channel, provider, payment ID, amount, proof image, status, reviewed time, credit wallet, credit transactions, border purchases, subscription activity, and quest progress.

How We Use Information

We use user information to create and secure accounts, authenticate web and mobile sessions, verify required Battle.net connections for WoW features, show profiles and rankings, match players and casters, run chats and teams, review profiles and payments, process wallet and credit actions, calculate and enforce WoW kata, select eligible WoW join roles, send app and email notifications, prevent abuse, handle reports, and maintain the service.

What Other Users Can See

Other users may see public-facing profile information such as your name, UID, avatar, kata, review summary, game profiles, WoW character data, selected WoW join roles, Raider.IO role scores, average item level, minimum gear item level, caster profile details, public posts, team membership, participant status, chat messages in shared threads, live stream links, and social links you add to a caster profile. Payment proofs, Battle.net access tokens, API tokens, FCM tokens, and admin-only review data are not intended to be public.

Sharing With Services and Admins

We share information with service providers only as needed to operate Challenex, including Google, Discord, Battle.net, Raider.IO, Firebase Cloud Messaging, email delivery, storage, hosting, and payment-related systems configured by admins. Challenex admins may review profile submissions, caster proof, payment proof, reports, posts, kata-related records, and user records to operate and protect the platform.

Cookies, Tokens, and Local Storage

We use cookies, sessions, CSRF tokens, remember tokens, API tokens, cached OAuth state, and local browser preferences such as language to keep users signed in, connect mobile sessions, protect requests, and remember interface choices.

Retention and Deletion

We keep information while your account is active or while it is needed for platform operation, safety, dispute handling, payment review, or legal compliance. You can request account deletion from account settings. The deletion flow removes the user account, sessions, chats, team links, reviews, reports, profiles, Battle.net links, payment rows, credit records, notification tokens, and stored public files that are tied to your account where the system can identify them.

Security

We use access controls, CSRF protection, token-based API authentication, validation, admin permissions, and private server-side storage controls. No online service can guarantee perfect security, so protect your own login providers and do not share sensitive payment or account credentials in chats or posts.

Contact

For privacy questions or deletion issues, use the support or account channel provided by Challenex. We may update this policy as the service changes.