1. Who we are
Level-UpFree ("we", "us", "our") operates the free social games platform at level-upfree.com. For the purposes of UK GDPR, the data controller is Level-UpFree, 84 Threadneedle Street, London EC2R 8AY, United Kingdom. You can reach our team at hello@level-upfree.com.
2. Our privacy-first approach
Level-UpFree is built around a principle: collect as little personal data as possible. We do not require user accounts, payment information, or persistent server-side profiles to play any of our free games. The only personal data we receive is what you choose to send us, such as via the contact form.
3. What data we collect
3.1 Information you provide directly
- Contact form submissions - your name, email address, optional phone number, subject and message contents.
- Newsletter sign-ups - your email address, if you opt in.
3.2 Information collected automatically
- Server logs - basic web server logs may capture IP address, user agent, referring page and request timestamps for security and abuse prevention. Logs are retained for up to 30 days.
- Local browser storage - virtual coin balance, win/loss counters, age confirmation flag and cookie preference. None of this leaves your device.
We do not knowingly collect data from anyone under the age of 18.
4. Why we process your data and our lawful bases
- Replying to contact enquiries - lawful basis: legitimate interests and, where relevant, performance of a contract.
- Newsletter (optional) - lawful basis: consent. Each newsletter contains an unsubscribe link.
- Security and abuse prevention - lawful basis: legitimate interests.
- Age verification - lawful basis: legal obligation and legitimate interests (UK age-restriction expectations).
5. Sharing and transfers
We do not sell personal data. We share it only with trusted service providers that help us run the website, namely:
- Our website hosting provider, located within the United Kingdom or European Economic Area;
- Our email service provider, used for replying to your enquiries;
- Law enforcement or regulators, where required by law.
Where any provider is based outside the UK or EEA, we ensure appropriate safeguards (such as the UK International Data Transfer Addendum) are in place.
6. Cookies and local storage
Cookies are small text files placed on your device. Local storage is a related browser feature. We use them sparingly:
- Strictly necessary (always on) - cookie consent flag, age confirmation flag, virtual coin balance, game state. Lawful basis: PECR strictly necessary exemption / consent for age check.
- Functional (consent-based) - remembering your preferences (e.g. dismissed banners). Lawful basis: consent.
We do not use third-party advertising cookies or behavioural tracking. We do not currently use analytics on this platform.
Managing cookies
You can adjust cookie preferences via the banner shown on first visit, or by clearing browsing data in your browser settings. Disabling strictly necessary items will prevent the platform from remembering your age confirmation and may reset your virtual balance.
7. Your rights
Under UK GDPR you have the right to: access the data we hold about you; request correction or deletion; object to or restrict certain processing; withdraw consent at any time; and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any right, email hello@level-upfree.com. We respond within one calendar month.
8. Retention
- Contact form messages: retained for 12 months from last interaction, then deleted.
- Newsletter sign-ups: until you unsubscribe, then deleted within 30 days.
- Server logs: 30 days.
- Local browser storage: until you clear it from your browser.
9. Security
Connections to level-upfree.com are encrypted using TLS. We apply industry-standard administrative and technical controls. However, no internet transmission is ever 100% secure - if you have concerns about a specific incident, please contact us promptly.
10. Updates to this policy
If this policy is updated, we will adjust the "Last updated" date above and, for material changes, display a notice on the homepage for at least 30 days.