Privacy Policy

What we collect

• Account info: username, email, password (hashed with bcrypt), and anything you choose to put in your profile (display name, bio, avatar).
• Content: challenges and events you create, submissions you upload, comments you post, polls and boost claims you submit.
• Technical: IP address, browser/device info, basic analytics about how you use the app.

How we use it

• To run the platform — authenticate you, show you content, deliver notifications.
• To moderate. We use AI to flag risky content and human admins to confirm decisions.
• To pay winners (when prizes are involved). Payment processors may collect tax info above legal thresholds.
• To improve the product (aggregate usage analytics).

Who we share it with

• Service providers: Vercel (frontend hosting), Fly.io (backend hosting, IAD region), Neon (Postgres database, US-East-2), Stripe (payment processing and Connect payouts), Resend (transactional email). Uploaded media is stored on the Fly volume today; when we move to object storage we'll update this list before the switch.
• Legal compliance: when required by law.
• Never sold: we do not sell your personal data.

Your choices

• Edit your profile at any time from Settings.
• Delete your account entirely from Settings → Delete my account. Deletion is immediate; your username and email are released for reuse, and your posts show as authored by a deleted account.
• Request an export of your data by emailing privacy@chllgly.com. We respond within 30 days.

Children

Chllgly is not directed at children under 13. We don't knowingly collect info from anyone under 13. If you believe a minor has signed up, email us.

Security

Passwords are hashed with bcrypt. JWT tokens are signed with a server secret. All traffic is HTTPS in production. We're not bulletproof — no platform is — but we take security seriously.

Changes

We'll let you know when this changes meaningfully.

Contact

Privacy questions: privacy@chllgly.com.