Trust & Safety Hub
Last updated: May 6, 2026
Our Commitment: BrainCandy is dedicated to creating a safe, fair, and transparent platform for all players and creators. This hub documents our safety practices, fraud prevention, and monthly transparency reports.
Our Safety Commitments
✓ Kids Are Protected
BrainCandy Kids Zone is COPPA-compliant, requiring verifiable parental consent for users under 13. We:
- Collect minimal data from children (age, parent email, game scores only)
- Prohibit behavioral advertising to minors
- Provide no social features (no chat, no private messages)
- Hand-curate all 11 kid-approved games
- Monitor for child exploitation with zero tolerance
See Kids Privacy Notice for details.
✓ Fair Play, No Bot Manipulation
All BrainCandy contests are decided 100% by player skill. We guarantee:
- No hidden bots controlling contest outcomes
- No algorithmic tilting or rubber-banding
- No secret multipliers or hidden scoring adjustments
- All matches are human-vs-human (no AI opponents determining winners)
- Full transparency: contest odds and mechanics publicly disclosed
This directly addresses lessons from Mistplay and Papaya/Skillz lawsuits.
✓ Creator Promise (92% Locked)
We guarantee creators a fair deal:
- 92% of revenue from your games goes to you
- 90-day advance notice before any split change
- Monthly payouts (net-30), minimum $25 threshold
- No hidden fees or surprise deductions
- Direct payments via Stripe Connect
See Creator Agreement for full terms.
✓ Anti-Fraud & Anti-Cheating
We use advanced telemetry to prevent cheating and fraudulent payouts:
- Automated detection of bot farms, script injection, and play manipulation
- Human review before any payout denial or account suspension
- Transparent appeals process (7-day window)
- Payout clawback (50% of suspect month) for confirmed fraud
- Permanent account termination for habitual offenders
How to Report Safety Concerns
Report Abuse or Safety Issues
- In-Game Reporting: Click "Report" on any player profile or during gameplay
- Email: abuse@braincandy.im (24-hour response SLA for serious issues)
- Child Safety: safety@braincandy.im (immediate response for child exploitation)
- Copyright/IP: dmca@braincandy.im
Monthly Transparency Report (Sample)
Placeholder: Roger will populate actual data monthly. This template shows the commitment to transparency.
May 2026 Safety Metrics
[X]
Abuse Reports Received
[X]
Accounts Suspended
[X]
Games Removed
[X]
Avg Response Time
Enforcement Breakdown (Sample)
| Violation Type | Reports | Actions Taken | % Substantiated |
|---|---|---|---|
| Cheating / Bot Farms | [X] | [X] suspensions | [X]% |
| Harassment / Bullying | [X] | [X] warnings, [X] bans | [X]% |
| Hate Speech | [X] | [X] permanent bans | [X]% |
| IP Infringement | [X] | [X] takedowns | [X]% |
| Child Safety Concerns | [X] | [X] law enforcement referrals | [X]% |
| Other | [X] | [X] various actions | [X]% |
Average Response Times (May 2026 Target)
- Urgent (child safety, threats): <24 hours
- Serious (cheating, harassment): <7 days
- Routine (spam, minor violations): <14 days
- Appeals: <7 business days
Random Reward Odds (Fully Disclosed)
All loot boxes and random rewards in BrainCandy have transparent, publicly disclosed odds:
Gold Loot Box (1st Place Prize)
- 40% Rare cosmetic item
- 40% Uncommon cosmetic item
- 20% Common cosmetic item
Silver Loot Box (2nd-3rd Place Prize)
- 20% Rare cosmetic item
- 50% Uncommon cosmetic item
- 30% Common cosmetic item
Bronze Loot Box (Top 10 Prize)
- 10% Rare cosmetic item
- 40% Uncommon cosmetic item
- 50% Common cosmetic item
All cosmetics are purely visual (profile skins, game themes). No cosmetic provides gameplay advantage. Odds are audited quarterly by an independent third party.
Security Practices
Data Protection
- Encryption at Rest: All databases encrypted with AES-256
- Encryption in Transit: TLS 1.3 for all connections
- Password Security: bcrypt hashing (salt rounds ≥12)
- API Keys: Managed via environment variables, never logged
Incident Response
- Breach Notification: Within 72 hours to affected users (or as required by law)
- Investigation: Third-party security firm engaged for major incidents
- Transparency: Public postmortem published within 30 days (if not sensitive)
Legal Compliance
Applicable Laws
- COPPA: Children's Online Privacy Protection Act (kids under 13)
- CCPA/CPRA: California Consumer Privacy Act
- GDPR: General Data Protection Regulation (EU/UK)
- DMCA: Digital Millennium Copyright Act (takedowns)
- State Skill-Gaming Laws: Prohibited states for cash redemption clearly identified
Full policies for all regulations available in the Legal Center.
Winners List (Sample Format)
Top Daily Contest Winners published monthly. Format: First Name + Initial, Prize Amount, Date
| Winner | Prize (SB) | Game | Date |
|---|---|---|---|
| J.M. | 500 | Puzzle Quest | May 1, 2026 |
| A.L. | 300 | Color Splash | May 2, 2026 |
| R.T. | 500 | Memory Match | May 3, 2026 |
Continuous Improvement
BrainCandy is committed to evolving our safety practices based on:
- User feedback and reporting
- Industry best practices and lessons learned from peer platforms
- Regulatory guidance (FTC, state AGs, international regulators)
- Academic research on online safety
- Third-party audits and security assessments
Found a Security Issue? If you discover a vulnerability in BrainCandy, please email security@braincandy.im responsibly. We do not publish vulnerabilities publicly until patched. We may offer bug bounties for serious issues (details on request).
Contact & Resources
- General Safety: safety@braincandy.im
- Abuse Reports: abuse@braincandy.im
- Child Exploitation: safety@braincandy.im + NCMEC CyberTipline
- Community Guidelines: /community.html
- Kids Privacy: /kids-privacy.html