Built to earn your trust

Every account is protected by industry-standard OpenID Connect (OIDC) via Keycloak, with optional Steam account linking. Sessions are short-lived, cryptographically signed, and automatically invalidated on logout or suspicious activity.

Permissions are enforced through a role-based access control model. Organizers, players, and staff each operate within clearly scoped roles — no one can access resources beyond what their role permits.

Every sensitive action — from configuration changes to moderation decisions — is recorded in tamper-evident audit logs with timestamps, actor identity, and affected resource. Logs are retained and available to authorized administrators. Our anti-cheat system goes further still: model version and detection history are published hourly as a cryptographically signed, publicly verifiable transparency log, so independent researchers can audit historical detections without needing platform access.

We collect only what we need to run the platform and never sell your personal data. Project secrets and sensitive configuration values are encrypted at rest using AES-256-GCM. You can request a copy or deletion of your data at any time.

Our first-party desktop agent and detection pipeline flag integrity signals for review, with AI-assisted triage. Officials review the evidence and decide on any sanction.

High-stakes events and prize-eligible competitions require verified identity. We work with three independent KYC providers to confirm participant eligibility while keeping sensitive documents encrypted and strictly access-controlled.

User-generated content is screened by an AI moderation layer that catches policy violations before they reach other users. Flagged content is reviewed by our trust & safety team, and repeat offenders face escalating consequences.

We maintain alignment with applicable data protection regulations and platform policies. Our internal compliance program is reviewed regularly, and we work proactively with legal counsel to stay current as requirements evolve.

Tournament prize pools are held in escrow until results are final and a dispute window has closed, then credited to winners' wallets, with withdrawals approved by the organizer. Payouts above $100 require a verified tax form, and platform-generated 1099-MISC forms cover US winners above the $600 annual threshold — all gated on verified identity to keep prize money going to the right person.

Sanctions, dispute outcomes, officiating decisions, and rulebook history aren't locked behind a login. Our public transparency portal publishes the sanctions registry, the dispute and appeal ledger, periodic integrity reports, and full rulebook version history — no account required.