FAQ
Fairness & security
We combine skill-only mechanics, server-side validation, and fraud detection to keep the arena fair.
How do you keep scores fair?
We validate score submissions against active game sessions, prevent double submissions, and flag anomalies like extreme deltas or impossible durations.
Are matches peer-to-peer or server authoritative?
Scoring is server-authoritative via Supabase with RLS. Clients cannot update other users' data.
What about cheating tools?
We capture basic telemetry (duration, heartbeats) and flag suspicious patterns for admin review.
How are payments protected?
Webhooks are validated via shared secret and idempotent inserts into payment_events.