Privacy Policy

This policy explains what level.new collects, why we collect it, and what you can do about it. We try to keep it short and plain. If anything here doesn’t make sense, email privacy@level.new.

The short version. We collect the data we need to run the platform — your account, the games you publish, and basic usage telemetry. Your prompts and agent conversations stay on your computer. We don’t sell it. We don’t use creator content to train third‑party models. You can export or delete your data at any time.

Account information

When you sign up we store your email, display name, and (if you connect Google) your Google account identifier. If you upload an avatar or set a creator handle, we store that too.

App content

Games are built on your own computer by your own coding agent (such as Claude or Codex), using your account with that provider. We never see your prompts or agent conversations. When you publish, we store the built game files, cover, icon, and listing details you choose to upload. If you opt in to sharing source, we store that too.

User activity

When someone plays a game at level.new/<slug> we record gameplay sessions, scores, and presence data so leaderboards and multiplayer work. Users can play anonymously; we don’t require an account to play.

Usage telemetry

We capture product analytics events — page views, button clicks, publishes, and desktop app crashes — via PostHog, only if you opt in. We do not capture prompts, agent chat content, or in‑game user events.

Device and log data

Like every web service, we record IP addresses, user agents, and request timestamps in short‑lived logs for security, rate‑limiting, and debugging.

• To host and serve the games you publish.
• To understand which features get used and which break — so we can improve them.
• To send transactional email (sign‑in links and publish notifications).
• To keep the platform safe: detect abuse, enforce reserved slugs, and respond to takedown reports.

We use a small number of trusted subprocessors to operate level.new. Each one only sees the data it needs to do its job.

We don’t sell personal information, and we don’t share creator content with model providers. level.new doesn’t call any AI model on your behalf — your coding agent talks to its provider directly under your own account and that provider’s terms.

We only use first‑party cookies on level.new. Games run on a separate, isolated play domain that can’t read your level.new cookies. We use the Supabase Auth session cookie that keeps you signed in, and a PostHog analytics cookie. We don’t embed third‑party ad networks or cross‑site trackers.

• Access & export. You can download your apps and account data from your account settings.
• Delete. Deleting your account removes your profile, apps, and associated bundles within 30 days. Some billing records are retained where law requires it.
• Opt out of analytics. Turn off product analytics in account settings; we’ll still need the cookies that keep you signed in.
• Marketing email. Every marketing email has an unsubscribe link. Transactional email (sign‑in, receipts) can’t be turned off while your account is active.

level.new isn’t directed at children under 13, and we don’t knowingly collect personal information from them. If you believe a child has given us personal information, email privacy@level.new and we’ll delete it.

We’ll update this page when our practices change. If the change is material we’ll notify you by email or in the studio before it takes effect.

Questions, requests, or data subject inquiries: email privacy@level.new. We’re operated by Northbrook PBC.