Privacy Policy

This Privacy Policy explains how the Level Legends team ("Level Legends", "we", "us") handles personal data when you play Level Legends, including the web version at web.level-legends.app and the Telegram Mini App, and when you visit level-legends.app (together, the "Services"). It should be read together with our Terms of Service.

We are the controller of the personal data described here. You can reach us about privacy at support@level-legends.app.

1. Data we collect

Account and profile data

When you sign in, we receive basic profile data from the platform you use. For Telegram, this is typically your Telegram user ID, first and last name, username, language and profile photo, as provided by Telegram when you open the Mini App. If you sign in to the web version another way, we receive the identifier and profile details that sign-in method provides. We never receive your Telegram password or messages.

Game data

We store what is needed to run the game and keep your progress: your in-game nickname, hero, equipment, inventory, resources, $LEGD balance, quests, seasonal and leaderboard results, referrals, dungeon and duo activity, and records of battles and rewards.

Purchases and wallets

If you make a purchase, we receive the transaction details needed to deliver it, such as the item, amount, currency, time and the payment provider's transaction ID. Payments are processed by the platform or payment provider you use; we do not receive or store your bank card details. If you connect a crypto wallet, we receive its public address and the on-chain transactions related to the game. Blockchain transactions are public by nature and cannot be deleted by us or anyone else.

Device, usage and technical data

When you use the Services, we and our service providers automatically collect technical data such as your IP address, approximate location derived from it, browser and device type, operating system, language, screen size, pages and screens viewed, in-game events, referring page and campaign parameters (such as utm_source), error reports and timestamps.

Communications

If you contact us, we keep your message, your contact details and our reply so we can help you and keep a record of the conversation.

2. How we use your data

Purpose	Legal basis (where GDPR or similar laws apply)
Create and run your account, save progress, deliver rewards and purchases	Performance of our contract with you (Terms of Service)
Run leaderboards, events, duo play, referrals and other shared features	Performance of contract
Keep the game fair and secure: detect cheating, multi-accounting, fraud and abuse	Our legitimate interest in a fair and safe game
Understand how players use the Services, fix bugs and improve the game	Our legitimate interest in improving the Services, or your consent where the law requires it
Measure which campaigns and pages bring players to the game	Our legitimate interest, or your consent where the law requires it
Answer your requests and send important service messages	Performance of contract and our legitimate interest
Comply with legal obligations, such as tax, accounting and responding to lawful requests	Legal obligation

We do not sell your personal data, and we do not use it to make decisions that have legal or similarly significant effects on you based solely on automated processing. Automated checks may flag accounts for possible cheating, but enforcement decisions are reviewed by our team.

3. Cookies and analytics

We use PostHog for product analytics and error tracking on this website and in the game, hosted in the European Union. PostHog stores an anonymous visitor identifier in a cookie and local storage on the level-legends.app domain, so that a visit to this website and a later play session in the game can be counted as the same visitor. When you sign in to the game, this history may be linked to your account. We also keep the campaign parameters of your current visit in session storage so that they are passed along when you open the game.

We do not use session recording, and we do not use advertising cookies or cross-site advertising trackers on this website. You can delete or block cookies in your browser settings; the website will still work, but we will not be able to recognize repeat visits.

4. Who we share data with

We share personal data only as needed to run the Services:

• Service providers that host our servers and databases, provide analytics and error tracking, deliver content and help us with support. They process data on our behalf and under our instructions.
• Platforms and payment providers, such as Telegram, payment processors and wallet providers, when you sign in, pay or connect a wallet through them. Their own privacy policies apply to data they collect.
• Other players can see your public game profile, such as your nickname, avatar, hero, leaderboard positions and activity in shared modes.
• Authorities and others when required by law, or when needed to protect our rights, our players or the public, for example to investigate fraud.
• A successor if the game is reorganized, merged or sold, in which case this Policy will continue to apply to your data or you will be informed of any change.

5. International transfers

Our team and service providers may process data in countries other than yours, including outside the European Economic Area and the United Kingdom. Where required, we rely on safeguards recognized by law, such as the European Commission's Standard Contractual Clauses, to protect transferred data.

6. How long we keep data

We keep account and game data for as long as your account is active. If you ask us to delete your account, or if it stays inactive for a long time and we decide to remove it, we delete or anonymize your personal data within a reasonable period, except for data we must keep to meet legal, tax or accounting obligations, resolve disputes or prevent fraud and abuse. Analytics data is kept for a limited period and then deleted or aggregated.

7. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct inaccurate data;
• delete your data and your account;
• restrict or object to certain processing, including processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent;
• lodge a complaint with your local data protection authority.

To use these rights, including to request deletion of your account, write to support@level-legends.app from a channel that lets us confirm the account is yours, for example by including your in-game nickname and the platform you play on. We may ask for more information to verify your identity before acting on a request. We will respond within the time required by law.

8. Security

We use reasonable technical and organizational measures to protect personal data, such as encrypted connections, access controls and limiting access to staff and providers who need it. No system is perfectly secure, so we cannot guarantee absolute security. Keep your sign-in method and wallet secure, and tell us if you suspect unauthorized access to your account.

9. Children

The Services are not directed at children under 13, and we do not knowingly collect personal data from them. Where local law sets a higher age for consent to data processing, children below that age may use the Services only with the consent of a parent or guardian. If you believe a child has given us personal data without the required consent, contact us and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy when the Services or the law change. We will post the updated version on this page and change the "Last updated" date. For significant changes, we will make reasonable efforts to notify you, for example in the game.

11. Contact

For any question or request about privacy, write to support@level-legends.app.