Privacy policy

What we collect

Account details: your email address (kept by our sign-in provider), display name, handle and optional bio.

Activity: applications, the links to your entries, review decisions and reasons, metrics recorded for your entries, disputes and reports you file, notifications, and payment status steps for prizes.

Technical data: a session cookie so you stay signed in, your theme choice stored in your browser, and short-lived server logs with request ids for security and debugging.

Analytics screenshots

If you upload a screenshot of your account analytics, we store the image in a private storage bucket. Screenshots are shown only to you, the sponsor of that challenge and DuelX moderators and administrators, through short-lived links. We do not make them public. Please crop out anything you do not want shared, such as other people’s names or private numbers.

You can remove a screenshot yourself while entries are open. After that it stays as part of the review record until the retention period ends.

Services we use

Supabase stores account, challenge and screenshot data and handles sign-in, including sign-in with Google. Resend delivers the emails we send you, so it receives your email address and the message. These providers act on our behalf and do not use your data for their own purposes.

What we do not collect

We do not host your videos, and we do not take card details or bank details. Sponsors pay winners directly, outside DuelX.

How we use it

To run challenges: showing entries to the sponsor and moderators, scoring, publishing results, recording payment steps, and handling reports and disputes.

To keep DuelX safe: detecting spam and unusual metrics for a person to review, and keeping an audit record of important actions. We do not disqualify anyone automatically based on a signal alone.

To contact you: in-app notifications, and email about your entries, decisions, results and payments.

Who can see what

Public pages show challenges, published rankings and results, and winners’ display names, handles and entry links. They never show emails, private review notes or dispute evidence.

A sponsor sees entries to its own challenges. Moderators and administrators see what they need to review campaigns, and their actions are logged. Our service providers process data for us to host and run DuelX.

How long we keep it

Proposed periods for the pilot: entries, metrics and decisions for 24 months after a challenge closes; dispute evidence for 12 months after a decision; audit records for 36 months; notifications for 90 days; server logs for 30 days.

Your choices

You can update your profile at any time, and deactivate your account from the Account page. Deactivating clears your name, handle and bio. Entries and decisions are kept in anonymized form so results and audit records stay accurate.

Depending on where you live you may have rights to access, correct or delete your data. Ask us once a contact address is published here.

Security

Access is limited by role and organization, private data is protected by database access rules, and important actions are recorded. No system is perfectly secure, so please use a strong, unique password.

Changes and contact

We will show material changes in the app before they apply.

DuelX is currently a small pilot run by an individual. If that changes, this page will say who is responsible for your data.

Questions

Write to tesfayemusie48@gmail.com.