Please read this Privacy Policy carefully before using Level, available at https://levelbot.xyz. In this Privacy Policy, “Level”, “we”, “us”, and “our” refer to the Level service.
This Privacy Policy explains what personal data we collect, how we use it, how long we keep it, and what rights you have.
This Privacy Policy applies to Level’s verification system, including Discord account login, Roblox account linking, session cookies and related account features.
By using Level, you acknowledge that your personal data will be processed as described in this Privacy Policy.
1. About Level
Level is a Discord and Roblox verification service. Level allows users to connect a Discord account with a Roblox account so communities can confirm account ownership and identify linked users.
Level’s verification system may include:
- Discord login through OAuth
- Roblox login through OAuth
- Account linking between Discord and Roblox
- Verification status checks
- Verification links sent through the Level Discord bot
- Session cookies used to keep users signed in
- Basic account pages showing linked account information
2. Data Controller
Level is operated by an individual sole proprietor (Einzelunternehmer) based in Germany.
The operator of Level is the data controller responsible for the processing of personal data under this Privacy Policy.
3. Personal Data We Collect
Level collects and processes only the personal data needed to operate the verification system.
We may collect the following data:
- Discord user ID
- Discord username
- Discord avatar or profile image URL
- Roblox user ID
- Roblox username
- Basic Roblox profile information allowed by Roblox OAuth
- The connection between your Discord account and Roblox account
- Verification status
- OAuth-related authentication information
- Session information
- Essential cookie information
- Timestamps related to login, linking, verification, or account activity
- IP address or request metadata for security, fraud prevention, abuse prevention, and technical operation
- Support messages or requests you send to us
4. Discord Data
When you sign in with Discord, Level may receive information from Discord through OAuth.
This may include:
- Your Discord user ID
- Your Discord username
- Your Discord avatar
- Basic account information allowed by the OAuth permissions you approve
Level uses this information to identify your Discord account and connect it with your Roblox account.
Level is not affiliated with, endorsed by, or sponsored by Discord Inc.
5. Roblox Data
When you sign in with Roblox, Level may receive information from Roblox through OAuth.
This may include:
- Your Roblox user ID
- Your Roblox username
- Basic Roblox profile information allowed by the OAuth permissions you approve
Level uses this information to verify and store the connection between your Roblox account and Discord account.
Level is not affiliated with, endorsed by, or sponsored by Roblox Corporation.
6. How We Use Your Data
Level uses your personal data to:
- Provide account verification
- Link your Discord account with your Roblox account
- Show your linked account information to you
- Confirm verification status
- Maintain login sessions
- Prevent unauthorized access
- Prevent fraud, abuse, spam, and impersonation
- Protect the security of the service
- Debug technical issues
- Respond to support requests
- Enforce our Terms of Service
- Comply with legal obligations
7. Legal Basis for Processing
Because Level is operated in Germany, we process personal data under the General Data Protection Regulation (GDPR).
The legal bases for processing may include:
- Performance of a contract or pre-contractual steps under Article 6(1)(b) GDPR, because Level needs your data to provide verification features
- Legitimate interests under Article 6(1)(f) GDPR, including service security, fraud prevention, abuse prevention, technical operation, and protection of users
- Consent under Article 6(1)(a) GDPR, where you choose to authorize Discord or Roblox OAuth access
- Legal obligation under Article 6(1)(c) GDPR, where we must process or retain data to comply with applicable law
8. Account Linking Data
When you link your Discord and Roblox accounts, Level stores the connection between those accounts.
This linked account data may include:
- Discord user ID
- Discord username
- Roblox user ID
- Roblox username
- Verification status
- Linking timestamp or related metadata
This data is needed so Level can recognize you as verified and allow communities to rely on your verification status.
You must not link an account that you do not own.
9. Sessions and Cookies
Level uses essential cookies or similar session technology to keep you signed in, protect your session, and operate the verification system securely.
Session cookies are used only to:
- Identify your active login session
- Maintain your signed-in state
- Prevent unauthorized access
- Protect against forged or invalid requests
- Support basic security and authentication functions
We do not use these session cookies to track you across other websites, build advertising profiles, or collect analytics for marketing purposes.
These cookies are strictly necessary for Level to function properly and cannot be disabled without preventing parts of the service from working.
10. OAuth Tokens and Authentication Data
Level may process OAuth-related data from Discord and Roblox to complete login and verification.
This may include temporary authentication codes, access tokens, session identifiers, or similar technical data needed to complete authentication.
We use this data only for authentication, account linking, session management, and security.
You must not attempt to steal, reuse, forge, or manipulate OAuth tokens, session cookies, authentication states, or login requests.
11. IP Addresses and Request Metadata
Level may process IP addresses and request metadata when you use the service.
This may be used for:
- Security monitoring
- Abuse prevention
- Fraud prevention
- Rate limiting
- Debugging technical problems
- Protecting Level from attacks or unauthorized access
- Legal compliance where required
We do not use IP addresses to track you across unrelated websites.
12. Support Data
If you contact Level support, we may process the information you provide.
This may include:
- Your Discord user ID
- Your Roblox user ID
- Your username
- Your support message
- Screenshots or evidence you choose to send
- Information needed to resolve your request
Support data is used only to handle your request, investigate issues, enforce rules, and protect the service.
13. Who Can Access Your Data
Authorized Level staff may access personal data only when necessary.
Staff access may happen for:
- Support requests
- Security investigations
- Abuse prevention
- Debugging verification problems
- Legal compliance
- Service maintenance
Staff must not access user data for personal reasons or misuse account information.
14. Third-Party Services
Level relies on third-party services to operate.
These may include:
- Discord, for Discord login, Discord account identification, and bot features
- Roblox, for Roblox login and Roblox account identification
These third parties may process data according to their own privacy policies and terms.
Level does not control Discord, Roblox, or their data processing practices.
15. International Data Transfers
Some third-party services used by Level may process data outside Germany, the European Union, or the European Economic Area.
Where required, we rely on appropriate legal safeguards for international transfers, such as standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.
Because Discord, Roblox, hosting providers, and database providers may operate internationally, your data may be processed in countries with different data protection laws.
16. Data Retention
Level keeps personal data only for as long as necessary for the purposes described in this Privacy Policy.
In general:
- Session data is kept only as long as needed to keep you signed in and protect your session
- Linked account data is kept while your Level verification remains active
- Support data is kept as long as needed to handle the request and protect the service
- Security-related data may be kept as long as needed to investigate abuse, prevent fraud, enforce rules, or comply with legal obligations
- Data may be deleted earlier if it is no longer needed
You may request unlinking or deletion of your linked account data by contacting Level support.
Some data may be retained longer if required for legal, security, abuse prevention, or dispute resolution reasons.
17. Account Unlinking and Deletion
You may request that Level unlink your Discord account from your Roblox account.
You may also request deletion of your linked account data.
To request unlinking or deletion, contact us through our Discord Server
Deleting or unlinking your data may remove or disable your verified status in communities that rely on Level verification.
18. Your Rights Under GDPR
If you are located in the European Union, European Economic Area, Germany, or another region with similar data protection laws, you may have the following rights:
- Right of access: You can request information about the personal data we process about you
- Right to rectification: You can request correction of inaccurate personal data
- Right to erasure: You can request deletion of your personal data
- Right to restriction: You can request that we restrict processing of your personal data
- Right to data portability: You can request a copy of certain personal data in a structured format
- Right to object: You can object to processing based on legitimate interests
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time
- Right to lodge a complaint with a data protection authority
To exercise these rights, contact us using our Discord Server
We may need to verify your identity before processing your request.
19. Right to Complain
If you believe Level has handled your personal data incorrectly, you have the right to complain to a data protection authority.
If you are in Germany, you may contact the data protection authority responsible for your federal state.
You may also contact us first so we can try to resolve the issue directly.
20. Children and Minors
Level is not intended for children under 13 years old.
You must be at least 13 years old to use Level.
If you are under 18, or under the age of majority in your country, you should use Level only with permission from a parent or legal guardian.
If we learn that we have collected data from someone under 13, we may delete the data and restrict access to Level.
21. Data Security
Level uses reasonable technical and organizational measures to protect personal data.
These measures may include:
- Secure authentication flows
- Essential session cookies
- Access restrictions
- Database access controls
- Rate limiting
- Security checks
- Internal access limitations
No online service can guarantee perfect security.
You are responsible for keeping your Discord and Roblox accounts secure. If your Discord or Roblox account is compromised, your Level verification may also be affected.
22. No Sale of Personal Data
Level does not sell your personal data.
Level does not use your personal data for third-party advertising profiles.
Level does not use essential session cookies to track you across unrelated websites.
23. Automated Decision-Making
Level may automatically determine whether a Discord account is linked to a Roblox account based on the verification process.
This is necessary for the verification system to work.
Level does not use personal data for automated decisions that produce legal effects or similarly significant effects on you under Article 22 GDPR.
Verification status may affect access, roles, or permissions in third-party Discord servers or communities, but those decisions are controlled by those communities, not by Level.
24. Server Communities and Third Parties
Communities that use Level may rely on your verification status.
Level may confirm whether a Discord account is linked to a Roblox account.
Level is not responsible for how Discord servers, Roblox communities, or third parties use verification results, roles, permissions, or community decisions.
25. Legal Requests and Safety
We may disclose personal data if required to do so by law or if we believe disclosure is necessary to:
- Comply with a legal obligation
- Protect Level’s rights or property
- Investigate abuse or security threats
- Protect users or the public
- Enforce our Terms of Service
- Respond to lawful requests from authorities
We will only disclose data where we believe it is lawful and necessary.
26. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make material changes, we will update the “Last updated” date and may provide notice through the website or Discord support server.
Your continued use of Level after changes take effect means you acknowledge the updated Privacy Policy.
If you do not agree with the updated Privacy Policy, you must stop using Level and may request deletion or unlinking of your account data.
By using Level, you acknowledge that you have read and understood this Privacy Policy.