Privacy Policy

1. Introduction

Level Group Ltd ("we", "our", or "us") operates Connexion. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our service.

2. Information We Collect

2.1 Information You Provide

• Account: Username, email, password (encrypted), display name, date of birth
• Profile: Avatar, bio, privacy settings
• Content: Messages, invitations, friend connections

2.2 Automatic Collection

• Usage: Game statistics, win/loss records
• Device: IP address, browser type, OS
• Logs: Access times, pages viewed
• Cookies: Session tokens, preferences

3. How We Use Your Information

• Provide and maintain our service
• Authenticate accounts and prevent fraud
• Enable gameplay features
• Display leaderboards and statistics
• Send service notifications
• Improve our service (with consent)
• Comply with legal obligations

4. Legal Basis (GDPR)

• Contract: To provide our service
• Consent: Analytics and marketing
• Legitimate Interest: Fraud prevention
• Legal Obligation: Compliance

5. Data Sharing

• Other Users: Username, avatar, stats (based on privacy settings)
• Service Providers: Supabase (EU), Vercel (global) - GDPR compliant
• Legal: When required by law

We do NOT sell your personal information.

6. Data Retention

• Account: While active
• Game History: Anonymized after deletion
• Audit Logs: 2 years
• Deleted Accounts: 30-day grace period

7. Your Rights (GDPR)

• Access your data
• Correct inaccurate data
• Request deletion
• Data portability
• Object to processing
• Withdraw consent
• Lodge a complaint

Contact: info@level.net

8. Security

• HTTPS/TLS encryption
• bcrypt password hashing
• Row-level security
• Regular audits

9. Cookies

• Essential: Authentication, security (always active)
• Analytics: Usage patterns (consent required)
• Preferences: Your settings

10. Age Requirement

Our service is for users aged 13+. We do not knowingly collect data from children under 13.

11. International Transfers

Data is primarily stored in EU (Supabase). International transfers use Standard Contractual Clauses and GDPR-compliant mechanisms.

12. Changes

We may update this policy. Significant changes will be notified via email or in-app notice.

13. Contact