Privacy policy
1. In short
The portal asks for no e-mail or phone number and uses no advertising trackers. A name and a password are enough for an account. We store the minimum needed to sign you in, keep your farms and protect against abuse.
2. What data we process
| Data | Why |
|---|---|
| Player name (nickname) | sign-in, display on the farm |
| Password hash (bcrypt) | checking sign-in; the password itself is never stored or transmitted |
| Avatar (colours/outfit/hat) | rendering the character |
| Farm and room state, in-game progress | saving the game between sessions |
Session identifier — cookie gw_session | keeping you signed in; HttpOnly, SameSite=Lax, Secure over HTTPS |
Device identifier — cookie gw_dev (a random number) | counting a guest like 👍/👎 once and only after the game was launched; HttpOnly, never shared with games or third parties, not used for ads |
| Game ratings, likes, reviews and replies, “helpful” marks and reports | showing ratings and reviews on game pages, moderation; reviews are public and shown under your nickname |
| A salted hash of the IP address (the IP itself is not stored) when you post a review | protection against spam and ban evasion |
| Daily game launch counts (not linked to a person) | the “played N times” counter on game pages |
| IP address, User-Agent, request URL, time | web server and Cloudflare logs: diagnostics and protection against attacks/abuse |
| Local scores and language choice | stored in your browser (localStorage), never sent to the server |
Language preference — cookie levbee_lang | remembering the site language you picked |
We collect no payment data: the service is free.
3. Where it is stored
- Portal server — a virtual machine in the European Union (France). Accounts, sessions and game state live in PostgreSQL on that server.
- Cloudflare — CDN, DDoS protection and proxy for the domain: processes IP addresses and request headers. It may set technical anti-bot cookies (for example
__cf_bm). - Google Fonts — some games load fonts from Google servers; your browser then contacts a third-party domain that sees its IP address.
- Your browser — scores, language and game settings in
localStorage; you can delete them by clearing site data.
4. Legal basis and retention
- Sign-in and game data — performance of our agreement with you (you use the service).
- Logs and abuse protection — legitimate interest in service security.
- Sessions expire or are deleted on sign-out; accounts and farms are kept until account deletion; server logs — no longer than 14 days; backups — up to 7 days.
5. Sharing with third parties
We do not sell or share data for advertising. Our processors are Cloudflare (traffic delivery and protection) and the server hosting provider; only the portal owner has access to the server. Data may be disclosed where required by law.
6. Your rights
You may request access to your data, its correction or deletion of your account and farms; withdraw consent and ask questions. Write to the contact in section 8 — we reply within 30 days. For account deletion, provide your nickname (no password needed, but we may ask you to confirm sign-in).
7. Children
The service is not intended for children under 12. If you are younger, use the portal with your parents’ consent and do not share extra personal data in game chats.
8. Contact
Data owner and controller: the Levbee team. Data contact: [email protected].
9. Changes
This policy may be updated; the current revision and date are always at this address. Material changes will be announced on the portal.