Category: Administrator Guide
Approved custom characters use the main characters table with a private visibility flag, owner user ID and source order ID. Public pages show only public system characters. Signed-in character lists include public characters plus records owned by the current user. The chat page and chat API repeat the ownership check so changing a URL cannot expose another account’s character. Administrators can view all records. Do not make a custom character public without explicit authorization and an appropriate business process.