Privacy Policy

This policy covers levelshaper.com and everything you do while signed in. It is written to be read, not filed. If something here is unclear, write to privacy@levelshaper.com and we will explain it.

LevelShaper is not affiliated with, endorsed by, or sponsored by Roblox Corporation. Roblox and Roblox Studio are trademarks of Roblox Corporation. We do not receive any data from your Roblox account, and signing in to LevelShaper never involves your Roblox password.

Who is responsible

LevelShaper is the data controller for the personal data described here. LevelShaper is operated by its founder as a sole trader, not as a company. Privacy contact: privacy@levelshaper.com.

What we collect

Account data. Your email address, and the display name and profile picture you choose. If you sign in with Google, Google sends us your email address, name and profile picture — we never receive your Google password. If you sign up with an email and password, we store a one-way hash of the password, never the password itself.

What you type into the tools. The description you write, the genre, style and other settings you choose, and the prompt the system builds from them. Prompts are stored with the result they produced.

What you generate. The game specification, the generated place file data, images such as thumbnails and icons, and whether each result is public or private. Results are private to your account by default and appear in public galleries only if you choose to share them.

Visitor generations. If you try a tool before signing in, we store the result with a random identifier derived from a browser cookie and a one-way hash of your IP address, so we can apply fair-use limits and let you keep the result if you sign up.

Files you upload. If a tool accepts an upload, the file is stored privately under your account and used only to produce the result you asked for. We do not publish your uploads and do not use them to train any model.

Purchase records. The order number, what was bought, the amount, the currency, the date, the payment status, and the payment record our processor returns to us. Card numbers and bank details never reach our servers — they go directly to our payment processor. We also keep your credit balance and a ledger of how credits were granted and spent.

Moderation records. The outcome of every automated content check on your prompts and results, and any decision a person makes when reviewing it. When something is blocked we also keep the blocked text (up to 500 characters) or a link to the blocked image, so it can be reviewed and appealed.

Support messages. Anything you send to one of our mailboxes, and our replies.

Usage and device data. Server logs generated by our hosting provider (IP address, URL, response code, timestamp, user agent, referrer), and product analytics events such as which tool was opened or whether a generation succeeded, tied to a random identifier. Page analytics from Plausible are aggregate and cookie-free. We also use Microsoft Clarity to understand how pages are used: it records clicks, scrolling and mouse movement as heatmaps and session replays, and masks text you type.

Cookies and similar storage. A session cookie so you stay signed in; a random analytics identifier; a utm_source cookie for 30 days if you arrive from a campaign link; local storage for interface preferences; and — only if you click Accept in the cookie banner — first-party cookies set by Microsoft Clarity to recognise a returning browser (up to one year). Until you accept, Clarity runs without cookies. You can change your choice at any time from Cookie settings in the footer. We do not use advertising cookies.

Why we use it, and the legal basis

• Running your account and delivering what you asked for — authentication, generation, credits, subscriptions. Legal basis: performance of a contract.
• Taking payment and preventing fraud, including abuse of free credits. Legal basis: performance of a contract; legitimate interests.
• Moderating prompts and generated content under the content policy. Legal basis: legitimate interests in running a safe, lawful service; legal obligation where content is illegal.
• Support, billing and refund requests. Legal basis: performance of a contract.
• Security and availability — rate limiting, abuse detection, logs. Legal basis: legitimate interests.
• Improving the product through analytics. Legal basis: legitimate interests.
• Service email — verification, password resets, receipts. Legal basis: performance of a contract.
• Tax and accounting records. Legal basis: legal obligation.

We do not sell your personal data, we do not use it for targeted advertising, and we do not use it for automated decisions that produce legal effects for you.

Who we share it with

We use the following processors. Each receives only what it needs.

• Cloudflare (hosting, Workers, D1 database, R2 storage) — everything the service stores or serves.
• fal.ai (runs Google's Nano Banana image model, plus the NSFW Filter classifier that checks each generated image) and OpenRouter (passes text requests to OpenAI's GPT-5.6 Luna, and game-mechanic requests to DeepSeek's DeepSeek V4.1 Flash) — the prompt text and any input a tool needs to work on. No account data. The current model list is in the terms.
• Railway (test runs of AI-written game mechanics) — only the generated script, which may include message text from your request. Nothing is stored after the test.
• Creem (prompt screening) — the prompt text and generated text only, to decide whether it is allowed.
• Waffo (prompt screening, Prompt Sift) — the prompt text and generated text only, to decide whether it is allowed. Waffo does not store the text it checks.
• Our payment processor (named at checkout) — the details you give them directly at checkout.
• Resend (transactional email) — your email address and the message content.
• Plausible Analytics — aggregate, cookie-free page analytics.
• Microsoft Clarity — interaction data (clicks, scrolls, masked session replays) and device information. See the Microsoft Privacy Statement.
• Google — only if you choose to sign in with Google.

We also disclose data where the law requires it, to respond to a lawful request from a public authority, to protect a child's safety, or to establish or defend a legal claim.

International transfers

Our processors operate in the European Economic Area, the United Kingdom and the United States. Where personal data leaves the EEA or the UK, the transfer is covered by the European Commission's Standard Contractual Clauses (and the UK Addendum), or by an adequacy decision.

How long we keep it

• Free-tier results — may be deleted 30 days after they are created.
• Paid-plan results — kept until you delete them or close your account.
• Visitor generations that are never claimed — may be deleted on the same schedule as free-tier results.
• Account data — kept while the account exists.
• Orders, invoices and the credit ledger — kept for at least 7 years, because tax and accounting law requires it.
• Server logs — up to 7 days.
• Support email — 2 years after the conversation ends.
• Moderation records — kept while they may be needed for appeals and for compliance reviews by our payment partner. The blocked text or image link in them is erased when you close your account; the decision itself is kept.

Closing your account. You can delete your account from Settings → Profile. This cancels any active subscription, deletes the games and images you made, ends your sessions, erases the blocked text kept in moderation records, and irreversibly anonymises your name, email address and profile picture. Order and credit records are kept for the accounting period above, no longer linked to a usable account.

Security

All traffic is encrypted with TLS. Passwords are stored as one-way hashes. Private results and uploads are served only through short-lived signed links. Prompt content is redacted and truncated before anything is written to a log. No system is perfectly secure; if a breach is likely to put your rights at risk we will notify the competent authority within 72 hours and tell you directly where the law requires it. To report a vulnerability, write to legal@levelshaper.com.

Children’s privacy

Many Roblox creators are young, so we take this seriously.

• LevelShaper is not directed at children under 13. We do not knowingly collect personal information from a child under 13 without verifiable consent from a parent or legal guardian, as required by the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws.
• With parental consent, a parent or guardian creates and manages the account for the child, and we collect only what is needed to provide the service: an email address for the account, the prompts and results, and the usage data described above. We do not show a child's name or email on anything public, and we do not use a child's data for advertising.
• Parents and guardians can, at any time, review the personal information we hold about their child, ask us to delete it, and refuse further collection, by emailing privacy@levelshaper.com. We will verify that the request comes from the child's parent or guardian before acting on it.
• If we learn that we have collected personal information from a child under 13 without parental consent, we delete it and close the account.
• Where the age of digital consent in your country is higher than 13 (for example up to 16 in parts of the EU), that age applies instead.

Your rights

Wherever you are, you have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, to withdraw consent, and to complain to your data protection authority. Email privacy@levelshaper.com from the address on your account; we answer within 30 days and do not charge for this.

Changes to this policy

We may update this policy. Material changes are reflected in the date at the top of this page and, where appropriate, announced through the service.

Contact

• Privacy questions, data requests, parents and guardians: privacy@levelshaper.com
• Anything else: support@levelshaper.com
• Legal notices and security reports: legal@levelshaper.com
• Copyright complaints: dmca@levelshaper.com