A short account of what is stored.

Accounts created through Discord store the Discord user id, username, and display name returned by the identify scope. Arena does not request email, guild membership, or messages. Demo personas have no Discord id.

Profiles store the region, positions, availability, platform, and bio you type. Public profiles omit the Discord id. You can mark a profile non-public; it then disappears from public pages and slash-command lookup.

Sessions are random tokens stored as a hash. The cookie is HttpOnly and SameSite=Lax. Signing out deletes the server session.

Disputes are visible to the person who filed them and to moderator or admin accounts. They are not listed publicly. A future Discord mod-log message, if posting is enabled, will not include the report text.

There is no public suspension wall. A suspended account loses its sessions and sees the product as signed out.

The SQLite file on the machine running Arena is the system of record. There is no separate hosted database in this project.