Public-facing user record exposed to the game. Profile fields only — never tokens, emails, or anything that could leak across iframes.
Direct URL to the avatar PNG/SVG (already CDN-served).
Stable opaque ID. Treat as a string; do not parse.
Player-chosen display name.
Public-facing user record exposed to the game. Profile fields only — never tokens, emails, or anything that could leak across iframes.