Last updated August 21, 2026

Privacy, plainly.

KOH collects only what is needed to run a verified paid leaderboard and keep it understandable.

X identity

KOH does not connect to your X account. When you challenge, we generate a single-use proof code that expires after ten minutes and open X’s official composer with a public verification post prepared for you. After you paste that post’s URL, KOH asks X’s public oEmbed service to confirm that the exact code was published by the handle you claimed. We store the verified handle, post ID and verification timestamps; we do not receive X credentials, access tokens, email, followers or private account data. You can delete the proof post after confirmation. Protected accounts cannot use public-post verification.

Sessions and security

A signed, secure browser cookie keeps you verified. Sessions last no more than 365 days, expire after 90 days without activity and rotate weekly. They remain revocable, including when you sign out. A random session identifier is stored only as a one-way hash. Temporary proof codes and browser-binding cookies expire after ten minutes and work once. To protect verification and checkout from abuse, KOH briefly stores one-way hashes derived from request information with attempt counts and expiry timestamps; raw IP addresses are not stored in KOH’s database.

Payments

Polar handles payment details, receipts and tax information. KOH receives checkout and order identifiers, product and payment status, amounts and timestamps, but does not receive or store your full card number. Your IP address and a stable pseudonymous customer reference are sent directly to Polar for payment, fraud processing and duplicate-customer prevention; the reference does not contain your public X handle.

Arena records

We keep bids, paid totals, ranks, reign times, battle history and public profile choices so the leaderboard and trophy history can work. One verified handle can hold only one active KOH identity and one open checkout at a time. Because public oEmbed does not provide X’s immutable numeric account ID, KOH cannot automatically detect a later handle rename or transfer. Public actions may remain visible after you are outbid. Payment reconciliation records are retained only for the accounting, dispute and legal period that applies, then deleted or anonymised where possible.

Live activity

We use a random browser-session heartbeat to estimate how many people are watching or preparing a challenge. It is not linked to your X identity or used as an advertising profile. A heartbeat stops counting after 90 seconds and stale rows older than one hour are removed on the next activity.

Retention

Expired or revoked sessions, expired proof records and stale rate-limit records are removed during normal security activity. Verified handle records remain while your KOH identity exists to prevent duplicate claims; you may request deletion, subject to payment, fraud-prevention and legal retention needs. Optional profile information remains until you remove it or request deletion. Public competition history may be retained in an anonymised form so past seasons remain understandable.

Your choices

You can disconnect by signing out and delete the public proof post after confirmation. For access, correction or deletion questions, contact @itzanders on X. Financial records may need to be retained where required by law.