Privacy Policy

This policy covers levelshaper.com and everything you do while signed in. It is written to be read, not filed. If something here is unclear, write to privacy@levelshaper.com and we will explain it.

LevelShaper is not affiliated with, endorsed by, or sponsored by Roblox Corporation. Roblox and Roblox Studio are trademarks of Roblox Corporation. We do not receive any data from your Roblox account, and signing in to LevelShaper never involves your Roblox password.

Who is responsible

LevelShaper is the data controller for the personal data described here. LevelShaper is operated by its founder as a sole trader, not as a company. Privacy contact: privacy@levelshaper.com.

What we collect

Account data. Your email address, and the display name and profile picture you choose. If you sign in with Google, Google sends us your email address, name and profile picture — we never receive your Google password. If you sign up with an email and password, we store a one-way hash of the password, never the password itself.

What you type into the tools. The description you write, the genre, style and other settings you choose, and the prompt the system builds from them. Prompts are stored with the result they produced.

What you generate. The game specification, the generated place file data, images such as thumbnails and icons, and whether each result is public or private. Free-tier results are public by default and may appear in our galleries without your name or email; results made on Pro or during a Design Pass are private.

Visitor generations. If you try a tool before signing in, we store the result with a random identifier derived from a browser cookie and a one-way hash of your IP address, so we can apply fair-use limits and let you keep the result if you sign up.

Files you upload. If a tool accepts an upload, the file is stored privately under your account and used only to produce the result you asked for. We do not publish your uploads and do not use them to train any model.

Purchase records. The order number, what was bought, the amount, the currency, the date, the payment status, and the payment record our processor returns to us. Card numbers and bank details never reach our servers — they go directly to our payment processor. We also keep your credit balance and a ledger of how credits were granted and spent.

Support messages. Anything you send to one of our mailboxes, and our replies.

Usage and device data. Server logs generated by our hosting provider (IP address, URL, response code, timestamp, user agent, referrer), and product analytics events such as which tool was opened or whether a generation succeeded, tied to a random identifier. Page analytics are aggregate and cookie-free.

Cookies and similar storage. A session cookie so you stay signed in; a random analytics identifier; a utm_source cookie for 30 days if you arrive from a campaign link; and local storage for interface preferences. We do not use advertising or cross-site tracking cookies.

Why we use it, and the legal basis

• Running your account and delivering what you asked for — authentication, generation, credits, subscriptions. Legal basis: performance of a contract.
• Taking payment and preventing fraud, including abuse of free credits. Legal basis: performance of a contract; legitimate interests.
• Moderating prompts and generated content under the content policy. Legal basis: legitimate interests in running a safe, lawful service; legal obligation where content is illegal.
• Support, billing and refund requests. Legal basis: performance of a contract.
• Security and availability — rate limiting, abuse detection, logs. Legal basis: legitimate interests.
• Improving the product through analytics. Legal basis: legitimate interests.
• Service email — verification, password resets, receipts. Legal basis: performance of a contract.
• Tax and accounting records. Legal basis: legal obligation.

We do not sell your personal data, we do not use it for targeted advertising, and we do not use it for automated decisions that produce legal effects for you.

Who we share it with

We use the following processors. Each receives only what it needs.

• Cloudflare (hosting, Workers, D1 database, R2 storage) — everything the service stores or serves.
• AI model providers (such as fal.ai, OpenRouter, OpenAI and Replicate) — the prompt text and any input a tool needs to work on. No account data.
• Creem (prompt screening) — the prompt text only, to decide whether it is allowed.
• Our payment processor (named at checkout) — the details you give them directly at checkout.
• Resend (transactional email) — your email address and the message content.
• Plausible Analytics — aggregate, cookie-free page analytics.
• Google — only if you choose to sign in with Google.

We also disclose data where the law requires it, to respond to a lawful request from a public authority, to protect a child's safety, or to establish or defend a legal claim.

International transfers

Our processors operate in the European Economic Area, the United Kingdom and the United States. Where personal data leaves the EEA or the UK, the transfer is covered by the European Commission's Standard Contractual Clauses (and the UK Addendum), or by an adequacy decision.

How long we keep it

• Free-tier results — may be deleted 30 days after they are created.
• Pro and Design Pass results — kept until you delete them or close your account.
• Visitor generations that are never claimed — may be deleted on the same schedule as free-tier results.
• Account data — kept while the account exists.
• Orders, invoices and the credit ledger — kept for at least 7 years, because tax and accounting law requires it.
• Server logs — up to 7 days.
• Support email — 2 years after the conversation ends.

Closing your account. You can delete your account from Settings → Profile. This cancels any active subscription, deletes the games and images you made, ends your sessions, and irreversibly anonymises your name, email address and profile picture. Order and credit records are kept for the accounting period above, no longer linked to a usable account.

Security

All traffic is encrypted with TLS. Passwords are stored as one-way hashes. Private results and uploads are served only through short-lived signed links. Prompt content is redacted and truncated before anything is written to a log. No system is perfectly secure; if a breach is likely to put your rights at risk we will notify the competent authority within 72 hours and tell you directly where the law requires it. To report a vulnerability, write to legal@levelshaper.com.

Children’s privacy

Many Roblox creators are young, so we take this seriously.

• LevelShaper is not directed at children under 13. We do not knowingly collect personal information from a child under 13 without verifiable consent from a parent or legal guardian, as required by the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws.
• With parental consent, a parent or guardian creates and manages the account for the child, and we collect only what is needed to provide the service: an email address for the account, the prompts and results, and the usage data described above. We do not show a child's name or email on anything public, and we do not use a child's data for advertising.
• Parents and guardians can, at any time, review the personal information we hold about their child, ask us to delete it, and refuse further collection, by emailing privacy@levelshaper.com. We will verify that the request comes from the child's parent or guardian before acting on it.
• If we learn that we have collected personal information from a child under 13 without parental consent, we delete it and close the account.
• Where the age of digital consent in your country is higher than 13 (for example up to 16 in parts of the EU), that age applies instead.

Your rights

Wherever you are, you have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, to withdraw consent, and to complain to your data protection authority. Email privacy@levelshaper.com from the address on your account; we answer within 30 days and do not charge for this.

Changes to this policy

We may update this policy. Material changes are reflected in the date at the top of this page and, where appropriate, announced through the service.

Contact

• Privacy questions, data requests, parents and guardians: privacy@levelshaper.com
• Anything else: support@levelshaper.com
• Legal notices and security reports: legal@levelshaper.com
• Copyright complaints: dmca@levelshaper.com