Privacy Policy

This Privacy Policy explains how LevelForge (we, us, our) collects, uses and shares personal information when you use the LevelForge website and its features (the Service). We are the controller of that information.

It does not cover the gaming platforms you link, which are independent companies with their own privacy policies. It also does not cover other websites we link to.

Your use of the Service is also governed by our Terms of Service.

Information you give us. When you create an account we collect your email address, your chosen username, your country, and a password (which is hashed by our authentication provider and is never visible to us). You can optionally add a tagline and upload an avatar image.

Gaming account identifiers. When you link a platform, we store the identifier you supply and the account identifier that resolves to — for example a SteamID64, a PSN account ID or a Riot PUUID — together with the public display name and avatar that platform publishes.

Public game data. Using those identifiers we read what the platform publishes about your account and store it, so that we can compute and display your profile. Depending on the platform, that includes:

• The games in your library, and which of them you have played.
• Playtime per game, and when you last played, where the platform publishes it.
• Achievement, trophy and gamerscore totals, and the achievement definitions for the games you own.
• Rank, character and progression data — League of Legends ranked placements, World of Warcraft characters, Diablo 3 paragon level, StarCraft II career statistics.

Usage and technical information. Like most websites, we and our providers automatically receive your IP address, browser and device type, referring page, and the pages you view. Through our analytics provider we also record product events — signing in, linking a platform, editing your profile, and whether those actions succeeded or failed — along with unhandled errors.

What we never collect. We do not ask for or receive your password for any gaming platform, and we do not process payments, so we hold no card or billing data.

We use the information above to:

• Create and maintain your account, and sign you in.
• Compute your XP, level, tier and ranking, and render your profile, dashboard and leaderboard position.
• Fetch and refresh your data from the platforms you have linked.
• Respond to your questions and provide support.
• Understand how the Service is used, diagnose errors, and improve it.
• Detect, investigate and prevent abuse, fraud, statistic manipulation, and breaches of our Terms.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not share it with advertisers or use it for advertising or profiling unrelated to the Service.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

• Performance of a contract — to create your account and provide the Service you asked for, including reading the platform data you chose to link.
• Legitimate interests — to keep the Service secure, prevent abuse, and understand and improve how it is used, in each case balanced against your rights.
• Consent — where we ask for it, for example for non-essential analytics in jurisdictions that require it. You can withdraw consent at any time.
• Legal obligation — where we must retain or disclose information to comply with the law.

LevelForge is a comparison service, so some of your information is published deliberately. While your profile visibility is set to public, the following can be seen by anyone, including people who are not signed in:

• Your username, avatar and tagline.
• Your country, shown as a flag beside your name on your profile and on the leaderboard. Note that you choose this at signup, and it is a public field.
• Your level, tier, lifetime XP and global rank.
• The platforms you have linked, and the aggregated statistics derived from them — hours, achievement counts, your most-played games.

Setting your profile to private in your account settings removes it from player search and from the global leaderboard, and makes the profile page visible only to you.

Your email address is never public. It is used for authentication and for service-related messages only.

Because a public page can be copied, cached or indexed by search engines and other services, we cannot guarantee that information which was public will disappear everywhere once you make your profile private.

We share personal information only in the circumstances described here. Our service providers act on our instructions and are bound to protect the data they handle for us.

Supabase

Authentication, database hosting, and storage of the avatar images you upload.

PostHog

Product analytics — which pages are visited, which actions succeed or fail, and error reports.

Vercel

Hosting and content delivery for the website, including request logs.

The gaming platforms you link

We send requests to their public interfaces using the identifier you supply, in order to read your public profile and game data.

We may also disclose information where we believe in good faith that it is necessary to comply with a law, regulation or valid legal process; to enforce our Terms; or to protect the rights, property or safety of LevelForge, our users, or the public. If we are involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction, and we will notify you before it becomes subject to a different privacy policy.

When you link a platform, we send requests to that platform using the identifier you gave us. This means the platform receives a request associated with your account, and the operators below may log it under their own privacy policies:

• Valve Corporation (Steam)
• GOG sp. z o.o. (GOG.com)
• Epic Games, Inc. (Epic Games Store)
• Sony Interactive Entertainment (PlayStation Network)
• Microsoft Corporation (Xbox)
• Blizzard Entertainment, Inc. (Battle.net)
• Riot Games, Inc. (League of Legends)

We read only what those platforms publish publicly, with the exception of Battle.net, where you sign in through Blizzard and grant us access explicitly. If you make a platform profile private, that data stops reaching us — but the data we already stored remains until it is refreshed or deleted, which is why unlinking or deleting your account is the way to remove it.

Some game and achievement information we store is not personal to you at all: catalogues of games and their achievement definitions are shared across all users and are not linked to any individual.

We use a small number of cookies and similar technologies:

• Essential cookies — set by our authentication provider to keep you signed in and to protect the session. The Service cannot work without these.
• Analytics cookies and local storage — set by our analytics provider to recognise a returning browser and to attribute events to a single visit. These are used to understand usage, not to advertise to you.

You can block or delete cookies in your browser settings, and most browsers offer a "Do Not Track" signal. Blocking essential cookies will sign you out and prevent you from signing back in.

We keep your account information for as long as your account exists. Platform data is refreshed periodically and is retained while the corresponding link is in place.

One exception worth knowing about: avatar images are not deleted when you replace or remove them. Removing an avatar stops it being displayed, but the underlying file stays in storage, and anyone who saved its direct URL can still open it. Ask us to delete your account if you need those files removed.

After account deletion we remove your profile and linked-account data. We may retain limited records for as long as necessary to comply with legal obligations, resolve disputes or enforce our agreements, and aggregated or de-identified data that cannot be linked back to you may be kept indefinitely.

We use industry-standard measures to protect personal information, including encryption in transit, hashed passwords handled by our authentication provider, and access controls on our database and storage. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us at support@levelforge.app.

We and our service providers operate internationally, so your information may be transferred to, stored in, and processed in countries other than the one you live in — including the United States — whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses to protect those transfers.

Depending on where you live, you may have the right to request access to the personal information we hold about you; to have it corrected or deleted; to object to or restrict how we process it; to receive it in a portable format; and to withdraw consent where we rely on it. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident, you may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

You can exercise several of these directly in the Service:

• Edit or correct your profile details in your account settings.
• Switch your profile to private to remove it from search and the leaderboard.
• Remove an avatar so it is no longer displayed.

For anything else — including account deletion and a copy of your data — write to support@levelforge.app. We will respond within the time limits set by applicable law, and we may need to verify your identity first.

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at support@levelforge.app and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page, and for material changes we will give notice through the Service or by email before they take effect. We encourage you to review this page periodically.

Questions about this Privacy Policy, or requests about your personal information, can be sent to support@levelforge.app.