Privacy policy

The legally binding version is the German one.

1. Controller

The controller for data processing on this website is Level Labs GmbH, Rietschelstraße 2, 04177 Leipzig, Germany, represented by its managing director(s) (Philipp Illmer-Krämer). Email: hello@levellabs.de.

2. Data protection officer

We have not appointed a data protection officer because we are not required to (§ 38 BDSG). Please send privacy questions directly to hello@levellabs.de.

3. Hosting

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Germany. Hetzner processes the data listed below on our behalf under a data processing agreement (Art. 28 GDPR).

4. Server log files

When you visit the website, our server automatically stores: a shortened IP address (IPv4 without the last byte, IPv6 only the first 48 bits), date and time, request method, requested address and protocol, status code, amount of data transferred, response time, the previously visited page (referrer) and the browser type (user agent). We need this to run the site securely and to detect errors and attacks. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR). Log files are deleted after 7 days.

5. Contact form and email

When you write to us via the contact form or by email, we process your name, email address, topic and message to answer your request. The legal basis is Art. 6 (1) (b) GDPR if your request aims at a contract, otherwise our legitimate interest in answering it (Art. 6 (1) (f) GDPR).

The form does not store anything in a database. Your details are sent by email to our mailbox and stay there until the request is dealt with; statutory retention periods remain unaffected. To prevent abuse, the form service briefly keeps your IP address in memory to reject more than five requests per hour. It is not stored and is discarded after one hour at the latest.

Recipient: our email provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, with whom we have concluded a data processing agreement (Art. 28 GDPR).

6. Spam protection (ALTCHA)

We use ALTCHA against spam, self-hosted on our server. Your browser solves a small computational puzzle. No cookies are set, no fingerprinting takes place and no data is transferred to third parties. The legal basis is our legitimate interest in a spam-free form (Art. 6 (1) (f) GDPR).

7. External links

We link to other services such as Steam, itch.io, Discord and social networks. No data is transferred to these providers unless you click a link. After the click, their privacy policies apply.

8. No cookies, no tracking

We do not set cookies and do not use analytics or tracking services. All fonts, images and scripts are served from our own server. Two exceptions to “nothing is stored”: if you switch the interface sounds on or off with the toggle, your browser remembers this setting in local storage (localStorage). If you switch between the light and dark design with the toggle, your browser remembers this choice until the end of the session (sessionStorage); it is deleted when you close the tab. Both only happen because you explicitly ask for it (§ 25 (2) no. 2 TDDDG), and the information never leaves your device. You can delete it at any time in your browser settings.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), notification (Art. 19), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7 (3)). Just write to hello@levellabs.de.

Right to object (Art. 21 GDPR): Where we process data based on our legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Sächsische Datenschutz- und Transparenzbeauftragte, Maternistraße 17, 01067 Dresden, Germany (postal address: Postfach 11 01 32, 01330 Dresden), email: post@sdtb.sachsen.de, www.datenschutz.sachsen.de.

10. Encryption

The website is delivered exclusively via encrypted HTTPS (TLS), recognisable by the padlock icon and "https://" in the address bar.

11. Last updated

This privacy policy was last updated on 17 October 2026.