Privacy Policy

This policy explains which personal data Level Architect (the game, its online features and this website) processes, why, and which rights you have. The controller under the GDPR is:

Anders Petruschke, trading as Woanders Studio
Geschwister-Scholl-Straße 18, 52072 Aachen, Germany
support@woanders.studio

"We" below means Woanders Studio.

The game saves your level drafts, the levels you saved, cached level images and your settings (such as language and haptics) on your device. Unity Authentication also keeps a sign in token there, so you stay signed in. This is needed for the game to work (section 25 (2) no. 2 TDDDG). It stays on your device until you uninstall the game; nothing of it reaches us unless you publish a level.

The online features use Unity Authentication by Unity Technologies (Unity Software Inc., USA, and its affiliates). When you first go online, Unity signs you in as a guest with a random player ID. If you sign in with an account, this goes through Unity Player Accounts: with your email address, with Apple (Sign in with Apple) or with Google. Apple or Google then confirm who you are to Unity and share what you allow, usually your email address (Apple can hide it behind a relay address).

Our server only receives a token from Unity with your Unity player ID and whether you are a guest. We never receive your email address or password. See the privacy policies of Unity, Apple and Google.

The game talks to our server at api.level-architect.com. It stores:

• Your account: an internal ID, your Unity player ID, your profile code, your username if you choose one, whether you are a guest, your role (player or moderator), your status (for example restricted after a moderation decision) and when you joined.
• Levels you publish: the level file, its name, description, tags, image and upload time.
• Your play: the levels you like, and for each level you play your attempts, clears, deaths, best time and when you last played, and where you died (only the newest of these markers are kept for each level).
• The players you blocked.
• Reports you send (what you reported, the reason, your comment) and their status.
• Moderation decisions and staff notes about your levels or your account (see How long we keep data).

The server and its database run at Railway (Railway Corporation, USA) in its EU West region; level images are kept in a storage bucket there too. The server logs each request with your IP address, the time, the address requested and your device's user agent, to find faults and stop abuse. To limit requests it counts them per player or IP address in memory for a short time.

Your username, profile code and profile stats, the levels you publish (with their name, description, tags, image and counts) and your best times on leaderboards are public: every player sees them in the game, and anyone can see them on level-architect.com without signing in. A guest shows by a name generated from their player ID, such as @BouncyFrog482. Likes are only counted, not shown by name.

To keep the game safe and to meet our duties under the EU Digital Services Act, the server checks usernames, level names, descriptions and report comments against a word list. Reports are reviewed by a person (Anders, or a moderator he appoints).

When a level or player is reported, a short alert goes to a private channel on Discord (Discord Inc., USA): the level's name and code, or the player's username and profile code, and how many reports there are for each reason. It does not say who reported, and it does not contain the comment.

When you write to us by email or with the form on the support page, we process what you send: your email address, your name if you give it, the topic, a level or player code, and your message. We use it to answer you and to handle your report. Messages from the form are delivered to a private Discord channel (Discord Inc., USA). Our email is hosted by Google Workspace (Google Ireland Limited).

The form is protected by Cloudflare Turnstile, which checks your browser for signs of automated use; for this, Cloudflare processes your IP address and information about your browser and device. Turnstile only loads on the support page. Our website also counts form messages per IP address for a minute, to stop floods; your IP address is not sent with the message.

level-architect.com runs on Cloudflare Workers (Cloudflare, Inc., USA). To deliver pages and protect them from attacks, Cloudflare processes each request: your IP address, the page, your browser's user agent and the time. Our request logs at Cloudflare are kept for a few days. The site keeps answers from our server in Cloudflare's cache for a minute; this holds public level and profile data, nothing about you as a visitor. Level images load from our server at Railway, so Railway sees your IP address too.

The website sets no cookies, uses no analytics or tracking, and loads its fonts from itself.

When the released game or our server runs into an error or crashes, a report goes to Sentry (Functional Software Inc., USA), stored in its EU region (Frankfurt), so we can find and fix the problem. A report from the game holds the error and where it happened, the last log lines before it, the game version, your device model and operating system, and your pseudonymous player ID once you are signed in. A report from the server holds the error and the request it happened in, without login tokens, request contents or IP addresses. Sentry does not store IP addresses for us, and reports hold no names or email addresses. The game also reports how many play sessions ended without a crash per version. Development builds and the editor send nothing.

The game shows no ads and uses no analytics or tracking. If we ever add any of these, we will update this policy first.

• Providing the game and the online features you use (your account, publishing, likes, leaderboards, blocks), and answering requests about them: Art. 6 (1) (b) GDPR.
• Handling reports of illegal content and giving reasons for moderation decisions, as the Digital Services Act requires (Art. 16 and 17 DSA): Art. 6 (1) (c) GDPR.
• Keeping the service safe and free of abuse (word filter, reports, moderation log, rate limits, server and website logs, Turnstile), finding and fixing errors and crashes (Sentry), and answering other questions: our legitimate interest, Art. 6 (1) (f) GDPR.
• Storing data on your device: section 25 (2) no. 2 TDDDG, as above.

We do not sell your data, and we do not use it for advertising or profiling.

• Unity Technologies: sign in, on our behalf.
• Railway: hosting of our server, database and level images, on our behalf; data stored in the EU.
• Cloudflare: hosting of this website and the Turnstile check, on our behalf.
• Discord: delivery of report alerts and support messages to our private channels.
• Sentry: error and crash reports from the game and the server, on our behalf; data stored in the EU.
• Google: our email.
• Apple or Google, if you sign in with them: they handle that sign in under their own responsibility.
• Everyone: what is public, as described above.

Some of these companies are based in the USA or can access data from there. Such transfers are based on the EU-U.S. Data Privacy Framework where the company is certified under it (Art. 45 GDPR), and otherwise on the EU standard contractual clauses (Art. 46 GDPR).

• Your account, levels, likes, play stats, blocks and reports: until you delete your account.
• When you delete your account, all of it is deleted at once, with two exceptions: levels you chose to keep online stay without your name, with the likes and times others gave them; and the moderation log (next point).
• The moderation log records every staff decision and note, with its time. It refers to players and levels only by internal IDs. It stays after an account is deleted, because it is the record of past decisions and repeated abuse; your username is then replaced by "[deleted player]" in its notes. Every entry is deleted two years after it was made.
• Server logs at Railway and request logs at Cloudflare: a few days to a few weeks, then deleted automatically.
• Error and crash reports at Sentry: up to 90 days, depending on our plan, then deleted automatically.
• Database backups at Railway: deleted data can remain in them for up to four weeks, until they are replaced.
• Support messages, emails and report alerts: as long as we need them to handle the matter, and at most two years after the last message.
• Your Unity player is deleted at Unity when you delete your account in the game. A Unity Player Account you signed in with is managed by Unity and can be deleted there.

In the game, open Settings and choose Delete Account. You decide whether your levels are deleted too or stay online credited to "Deleted player". Level drafts on your device stay. If you can't open the game any more, email support@woanders.studio with your username or profile code; we may ask for something that shows the account is yours. See also the support page.

You have the right to access your data and receive a copy (Art. 15 and 20 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), and to restrict its processing (Art. 18). Where we rely on our legitimate interest, you can object at any time for reasons arising from your situation (Art. 21). Email support@woanders.studio; tell us your username or profile code so we can find your data.

You can also complain to a data protection authority, for example where you live, or the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

If you are under 16, you need a parent's or guardian's permission to use the online features. Children under 13 may only play with a parent's or guardian's permission and under their supervision. We collect as little as we can: no email address, no real name and no location, only the pseudonymous data described above. A parent or guardian can ask us at any time to delete a child's account and data.

We update this policy when the game, its services or the law change. The date at the top shows when it last changed.