Privacy Policy

Last updated: June 25, 2026

Heads up: placeholder draft. Get this reviewed before accepting regulated PII (payouts above tax-reporting thresholds, age verification, etc.).

What we collect

Account info: username, email, password (hashed with bcrypt), and anything you choose to put in your profile (display name, bio, avatar).
Content: challenges you create, submissions you upload, comments you post, predictions you make.
Technical: IP address, browser/device info, basic analytics about how you use the app.

How we use it

To run the platform — authenticate you, show you content, deliver notifications.
To moderate. We use AI to flag risky content and human admins to confirm decisions.
To pay winners (when prizes are involved). Payment processors may collect tax info above legal thresholds.
To improve the product (aggregate usage analytics).

Who we share it with

Service providers: hosting (Vercel, Fly.io), database (Neon), file storage (Cloudflare R2 or AWS S3 — when we swap from local disk), payments (Stripe — when implemented).
Legal compliance: when required by law.
Never sold: we do not sell your personal data.

Your choices

Edit or delete your profile at any time from the in-app settings.
Request a full export or deletion of your data by emailing privacy@chllgly.com.
Delete your account: same email, subject "DELETE ACCOUNT". We'll process within 30 days.

Children

Chllgly is not directed at children under 13. We don't knowingly collect info from anyone under 13. If you believe a minor has signed up, email us.

Security

Passwords are hashed with bcrypt. JWT tokens are signed with a server secret. All traffic is HTTPS in production. We're not bulletproof — no platform is — but we take security seriously.

Changes

We'll let you know when this changes meaningfully.

Contact

Privacy questions: privacy@chllgly.com.