Confidentialité

Controller and Contact

1.1 This policy explains how we handle personal data when you use LEVVVEL on the web (https://levvvel.com) or in our iOS and Android apps. Personal data means information that can identify you.

1.2 The controller under the General Data Protection Regulation (GDPR) is Bambeo GmbH, Törringstr. 23, 84359 Simbach am Inn, Germany. Email: [email protected]. For privacy requests, you may also write to [email protected].

1.3 Connections to our Service use TLS encryption (https://). We use data processing agreements with our processors where required by law.

Data We Collect Automatically

When you visit our website or use the app, our hosting provider (Cloudflare) processes server log data needed to deliver pages and protect the Service, such as:

• Pages requested
• Date and time of access
• Data volume transferred
• Referring URL
• Browser and operating system
• IP address

We use IP addresses briefly for abuse prevention (for example, rate limiting newsletter sign-ups). Legal basis: Art. 6 (1) point f GDPR (legitimate interest in a secure, stable Service).

Local Storage on Your Device

We store some preferences on your device using browser local storage or, in the mobile app, on-device storage (Capacitor Preferences). This is not the same as HTTP cookies. Third-party advertising and analytics providers may also set cookies as described in the sections below.

Depending on how you use the Service, local data may include:

• Theme preference (light/dark) on the website
• Preferred language (in the mobile app)
• Reward-link collection markers (which bonus links you have already claimed)
• Game-code vote markers (so you are not asked to vote twice on the same code)
• Saved articles and offline hub pages (mobile app only; stays on your device)
• Push notification prompt state (mobile app only)

You can clear website local storage through your browser settings. App data can be removed by clearing the app’s storage or uninstalling the app.

Legal basis: Art. 6 (1) point f GDPR (legitimate interest in a functional, user-friendly Service).

Contact by Email

If you contact us by email (for example via the addresses on our Contact page), we process the data you send (typically your email address, name if provided, and message content) to respond. Legal basis: Art. 6 (1) point f GDPR. We delete correspondence when it is no longer needed, unless statutory retention applies.

Newsletter and Code Alerts

If you subscribe via the site footer or a game-code alert form on a specific game page, we collect:

• Email address
• Language/locale of the page you used
• Interest categories you select (free codes, guides, industry statistics)
• For game-code alert forms: the game identifier (slug) for that page so we only email you about that game’s codes
• Time of consent and, after confirmation, time of subscription

Game-code alert signups are stored separately per game. Subscribers on a Shindo Life page only receive Shindo Life code alerts, not alerts for other games.

Subscription uses double opt-in: we send a confirmation email; your address is added only after you click the link.

Legal basis: Art. 6 (1) point a GDPR (consent). Subscription is intended for users who meet the age of digital consent in their country. We do not verify age; if we learn a subscriber is under that age, we delete the subscription. You can withdraw consent at any time via the unsubscribe link in each email or by contacting [email protected]. We delete subscription data after you unsubscribe, unless retention is required by law.

Confirmation and unsubscribe emails are sent through Cloudflare Email Service. Subscription records are kept on our servers while your subscription is active, or until unconfirmed sign-ups expire (48 hours). Code-alert emails are sent from LEVVVEL (Bambeo GmbH); each message includes an unsubscribe link and identifies Bambeo GmbH as the sender.

Push Notifications (Mobile App)

If you enable push notifications in the LEVVVEL app, we store:

• A device push token (provided by Apple or Google)
• Platform (iOS or Android)
• Language/locale
• Notification topics you receive
• For game-code pages: the game identifier(s) you opted into on that page, so push alerts match the game you were viewing

Notifications for iOS are delivered via Apple Push Notification service (APNs). Legal basis: Art. 6 (1) point a GDPR (consent via your device permission). Push notifications are intended for users who meet the age of digital consent in their country. You can disable notifications in your device settings at any time.

Game-Code Community Votes

On game-code pages you may vote whether a code still works. Votes are stored as aggregated counts on our servers. We do not require an account; a local marker on your device prevents duplicate votes from the same browser.

Legal basis: Art. 6 (1) point f GDPR (legitimate interest in maintaining useful, community-checked code lists).

Embedded Content

Some articles embed YouTube videos using YouTube’s privacy-enhanced mode (youtube-nocookie.com). When you play a video, YouTube may process data under its own privacy policy. We do not control that processing.

Online Marketing

Google AdSense

This website uses Google AdSense, a web ad service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland (“Google”). Google AdSense uses so-called “DoubleClick DART Cookies”. These text files are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses “web beacons” (small invisible graphics) to collect information, which can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by those cookies and/or web beacons (including your IP address) about your use of this website will normally be transmitted to a server of Google and will be stored there. When using Google AdSense, personal data may also be transmitted to the servers of Google LLC. in the USA.

Google will use the information obtained in this way to analyze your usage of this website with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may be transferred to third parties if this is prescribed by law and/or if third parties process this data by request of Google.

The described processing of data takes place according to Art. 6 (1) point f GDPR, for the purpose of target-oriented advertising to the user by third parties whose advertisements are displayed on this website based on the evaluated user behavior. At the same time, such processing serves our financial interest in exploiting the economic potential of our Internet presence by displaying personalized third-party advertising content for a fee.

For more information about Google’s privacy policy, please visit here.

You can permanently deactivate cookies for advertising preferences by blocking them via a respective setting of your browser software or by downloading and installing the browser plug-in.

Please note that certain functions of this website may not be used or may be used only to a limited extent if you have deactivated the use of cookies.

To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.

Freestar

We work with Publisher First, Inc. dba Freestar, 20715 N. Pima Rd., Suite 108, Scottsdale, AZ 85255, United States (hereafter “Freestar”) to provide advertising and publisher technology on this website, as such Freestar’s privacy policy is in effect.

Wargaming

We participate in the Wargaming Group Limited affiliate program (105 Agion Omologiton Avenue, Nicosia, 1080, Cyprus; hereafter “Wargaming”). Some articles include partner links to World of Tanks and World of Warships.

When you click a partner link, Wargaming may process referral data and set cookies on their website. We do not receive your Wargaming account details.

Legal basis: Art. 6 (1) point f GDPR (legitimate interest in measuring affiliate referrals and receiving commission). Further information on Wargaming’s use of data can be found in their privacy policy. You can limit cookie storage through your browser settings; blocking third-party cookies may affect referral attribution but does not stop you from browsing LEVVVEL.

Web Analysis Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland (“Google”). Google (Universal) Analytics uses so-called cookies, which are text files stored on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of this website (including the shortened IP address) is generally transmitted to a Google server and stored there. When using Google (Universal) Analytics, personal data may also be transmitted to the servers of Google LLC in the USA.

This website uses Google (Universal) Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymization of the IP address by shortening it and excludes a direct personal relationship. As a result of the extension, your IP address will previously be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, the processing is carried out in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google (Universal) Analytics is not merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we should point out that in that case, you might not be able to use the full functionality of this website. You may permanently prevent Google from collecting and processing data generated by cookies regarding the use of the website (including your IP address). You can download and install the browser plugin.

Further information about Google (Universal) Analytics can be found here.

To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.

Service Providers

We use the following processors to operate the Service:

• Cloudflare — hosting, CDN, data storage, and transactional email
• Apple — push notification delivery (iOS)
• Google — push notification delivery (Android, when enabled)

We have data processing agreements in place where required. Provider privacy policies apply to their own processing.

Children

Our Service covers video games and is not directed at children under 16. We do not knowingly collect personal data from children under 16 for consent-based features (newsletter, code alerts, or push notifications) without parental consent, and we do not offer verified parental-consent flows.

If you are a parent or guardian and believe your child under 16 subscribed or enabled push notifications, contact [email protected] and we will delete the relevant data. Visiting the Service may still involve limited technical processing (for example, server logs) as described above.

In EU member states that allow a lower age of digital consent (down to 13), that national age applies instead of 16 for consent-based features in that country.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.

Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, and port your data, to withdraw consent, and to object to processing based on legitimate interests (including direct marketing). You may lodge a complaint with a supervisory authority. For Bavaria, Germany: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), www.lda.bayern.de.

To exercise your rights, email [email protected] with enough detail for us to identify your request.

Right to object: If we process your data on legitimate interests, you may object at any time for reasons arising from your situation. If you object to direct marketing, we will stop processing for that purpose.

Retention

We keep personal data only as long as needed for the purposes above or as required by law (for example, tax or commercial retention). Newsletter and push-token data are deleted when no longer needed; server logs are retained according to Cloudflare’s standard periods.

Changes

We may update this policy. The date at the top of this page shows when it was last revised. Material changes will be noted on the Service where appropriate.