What We Collect
- League account details such as email address, verification status, display name, role, and session records.
- Pet records, active-pet selection, pet metadata, skill aliases, canonical hatch atlas uploads, and asset hashes.
- Battle, replay, leaderboard, XP, Style XP, LP, season, Training Report summary, and audit ledger records.
- Moderation and safety metadata, including asset reports, review decisions, and risk signals.
- Operational security signals such as hashed IP address, hashed user agent, and hashed device id when available.
What Not To Submit
Do not submit raw source code, private repository content, full Codex transcripts, secrets, API keys,
access tokens, passwords, payment data, private documents, or any content you do not have the right to upload.
Training Reports should contain summarized work signals only. The League server scores those summaries and
does not need full local project contents.
Public League Surfaces
Active official pet assets are public by default so other players can see pets in profiles, battles,
friend rooms, replays, leaderboards, and social surfaces. Ranked-visible assets may be hidden or quarantined
if moderation or safety review requires it.
Providers
The official shared alpha uses these service providers:
- Render for the web service, Postgres database, and Redis-compatible Key Value runtime.
- Cloudflare R2 for pet atlas object storage and the public asset domain.
- Resend for email-code login delivery.
- OpenAI Moderation API for image and text safety triage.
- GitHub for the public repository and public issue reports.
Cookies And Tokens
The browser uses a host-only league_session cookie for League login. CLI and MCP users may use
CODEX_PET_SESSION_TOKEN locally. Keep that token private and rotate it by signing in again if it
is exposed.
Retention And Removal
Alpha records are kept while needed for gameplay, integrity audits, moderation, abuse prevention, debugging,
backups, and incident response. Public assets or account-visible records may be hidden, quarantined, or
removed when required for safety, legal, or operational reasons.
Help
For account problems, moderation reports, or privacy questions, email
support@codexpetz.com or start at the
support page. Do not post secrets or session tokens in public reports.