Community features
Profiles, Comments, and Reports
Public profiles, profile privacy toggles, comments, and report flow behavior.
Public profiles
A user can make their profile public from settings. Public profile documents live separately from private users/{uid} documents so email and provider data are not exposed.
Users can independently hide their published games and public comments from their profile.
- publicProfiles/{uid} is readable only when visibility is public, or by the owner.
- users/{uid} remains private to the owner.
- Profile bio is capped at 180 characters.
- Username/display name fields are capped at 32 characters.
Comments and reports
Published games can show public comments. Signed-in non-anonymous users can post comments and choose whether a comment is public or private.
Reports are API-only. The client sends a signed Firebase ID token to /api/reports; direct public writes to report records are not supported.