Box Battle Championship — Season 1
Privacy Policy
Version 0.2 · Last updated June 16, 2026
Draft — pending legal review. This document is a working draft and not yet final.
The Box Battle Championship, organized by jordan404, is the data controller for the personal data described in this policy. For privacy questions and data requests, contact privacy@boxbattle.live or use the contact form.
Contestant registration data: TikTok username, email address, country, profile photo, and optional social links. Email verification and delivery data for the messages we send you.
Contact messages: your name, email address, and message. Security telemetry: IP addresses used in rate-limit counters and scrubbed error reports. Liker leaderboard entries: public TikTok handles and like counts entered by jordan404.
Live leaderboard: during the live, public TikTok live data (coins received by each box and likers) is relayed in real time via a third-party provider (Euler Stream) to power the live leaderboard display. This display is indicative and is not the official source for prizes.
We collect no special-category data, make no automated decisions with legal effect (registration approvals are made by humans), and do not target anyone under 16 — entrants must be 18 or older.
Running the competition you entered — registration, verification, public contestant profiles, scores, and rankings (performance of a contract). Paying winners and keeping financial records (legal obligation). Keeping the service secure — rate limiting, CAPTCHA, error monitoring, audit logs (legitimate interest). Responding to your messages (legitimate interest). Displaying public liker handles entered by jordan404, and the live leaderboard powered by public live data relayed in real time (legitimate interest, with the removal route below).
We use the following processors to run the service:
- VercelHosting, edge network, cookieless analytics
- SupabaseDatabase, authentication, file storage (EU region — Frankfurt)
- ResendTransactional email
- UpstashRate-limit counters (EU region)
- CloudflareTurnstile CAPTCHA
- SentryError monitoring, PII-scrubbed (EU residency)
- Euler StreamReal-time relay of public TikTok live data for the live leaderboard (outside the EU — transfer safeguarded)
- Tik.ToolsFallback relay for the live leaderboard (outside the EU — transfer safeguarded)
The liker leaderboard displays public TikTok handles and like counts recorded by jordan404. If your handle appears and you want it removed, ask via the contact form or privacy@boxbattle.live — removal happens within 7 days.
Rejected registrations are deleted 90 days after rejection; withdrawn registrations after 30 days. Approved contestant data is kept for the event lifetime plus 12 months, then anonymized. Email verification tokens are deleted 7 days after expiry. Contact messages are deleted 12 months after resolution. Rate-limit keys expire within 24 hours. Payout records are kept 7 years for financial-records obligations.
You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. Send requests to privacy@boxbattle.live or via the contact form (topic: Privacy & data requests). We respond within 30 days. You also have the right to lodge a complaint with your supervisory authority.
Where data leaves the EU, transfers are safeguarded by data processing agreements with Standard Contractual Clauses (SCCs). Database, storage, and rate-limit processing run in EU regions. The live-leaderboard relay (Euler Stream, with Tik.Tools as fallback) runs outside the EU: only public live data passes through it, under appropriate safeguards.
We use only essential cookies and storage required to run the site. There are no advertising or cross-site tracking cookies, and analytics are cookieless.
Box Battle Championship is an independent event and is not affiliated with, endorsed by, or sponsored by TikTok.