Box Battle Championship — Season 1
Privacy Policy
Version 1.2 · Last updated July 1, 2026
The Box Battle Championship — operated by its organizers from Dubai, United Arab Emirates — is the data controller for the personal data described in this policy. For privacy questions and data requests, contact support@boxbattle.live or use the contact form.
Contestant registration data: TikTok username, email address, country, profile photo, and optional social links. Email verification and delivery data for the messages we send you.
Contact messages: your name, email address, and message. Security telemetry: IP addresses used in rate-limit counters and scrubbed error reports. Liker leaderboard entries: public TikTok LIVE engagement data (public handles and like counts) collected, relayed, or verified by the organizing team and/or its technical providers.
Live leaderboard: during the live, public TikTok live data (coins received by each box and likers) may be relayed in real time by technical live-data relay providers, where applicable, to power the live leaderboard display. The live leaderboard is provided for informational purposes only; official winners are confirmed after manual verification by the organizing team.
We only process the data necessary to operate the competition, verify participants, display public rankings, prevent fraud, communicate with users, and pay winners. We collect no special-category data and make no automated decisions with legal effect (registration approvals are made by humans). Participation is reserved for people aged 18 or older.
Running the competition you entered — registration, verification, public contestant profiles, scores, and rankings (performance of a contract). Paying winners and keeping financial records (legal obligation). Keeping the service secure — rate limiting, CAPTCHA, error monitoring, audit logs (legitimate interest). Responding to your messages (legitimate interest). Displaying public liker engagement data collected by the organizing team, and the informational live leaderboard powered by public live data relayed in real time by technical providers, where applicable (legitimate interest, with the removal route below).
We use the following processors to run the service:
- VercelHosting, edge network, cookieless analytics
- SupabaseDatabase, authentication, file storage (EU region — Frankfurt)
- ResendTransactional email
- UpstashRate-limit counters (EU region)
- CloudflareTurnstile CAPTCHA
- SentryError monitoring, PII-scrubbed (EU residency)
- Live-data relay providersReal-time relay of public TikTok LIVE data for the informational live leaderboard, where applicable (may operate outside the EU — transfer safeguarded)
The liker leaderboard displays public TikTok LIVE engagement data (public handles and like counts) collected, relayed, or verified by the organizing team and/or its technical providers. If your handle appears and you want it removed, ask via the contact form or support@boxbattle.live — removal happens within 7 days.
Rejected registrations are deleted 90 days after rejection; withdrawn registrations after 30 days. Approved contestant data is kept for the event lifetime plus 12 months, then anonymized. Email verification tokens are deleted 7 days after expiry. Contact messages are deleted 12 months after resolution. Rate-limit keys expire within 24 hours. Payout records are kept 7 years for financial-records obligations.
You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. Send requests to support@boxbattle.live or via the contact form (topic: Privacy & data requests). We respond within 30 days. You also have the right to lodge a complaint with your supervisory authority.
Where data leaves the EU, transfers are safeguarded by data processing agreements with Standard Contractual Clauses (SCCs). Database, storage, and rate-limit processing run in EU regions. The live-leaderboard relay, where used, may run via technical providers located outside the EU: only public live data passes through it, under appropriate safeguards.
We use only essential cookies and storage required to run the site. There are no advertising or cross-site tracking cookies, and analytics are cookieless.
Box Battle Championship is an independent event and is not affiliated with, endorsed by, or sponsored by TikTok.

