Privacy Policy

Last updated: May 7, 2026

1. Overview

NextLevel ("we", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data. The Service is operated by Shanu S and is available at nextlevel.shanu.dev.

2. Data We Collect

Account information

When you sign up, we collect your email address and a display name. If you sign in via Google or GitHub OAuth, we receive your name, email, and profile picture from those providers.

Gaming catalog data

Games you add to your catalog, ratings, status tags (playing, completed, etc.), and any notes you attach.

Usage data

We use Vercel Analytics to collect anonymized usage statistics such as page views and referrers. No personally identifiable information is included in analytics data.

Cookies and sessions

We use session cookies to keep you signed in. No advertising or third-party tracking cookies are used.

3. How We Use Your Data

To authenticate you and provide access to your account.
To store and display your gaming catalog and profile.
To generate your public profile page (if you have one).
To improve the Service using anonymized analytics.
To contact you about important Service changes (no marketing).

4. Data Sharing

We do not sell your personal data. We share data only in these limited cases:

Infrastructure: Turso (database hosting) stores your data on their servers. Vercel hosts the application.
OAuth providers: If you sign in via Google or GitHub, those providers receive a sign-in event per their own privacy policies.
Legal: We may disclose data if required by law or to protect our rights.

5. Public Profiles

If your profile is set to public, your username, gaming catalog, and stats are visible to anyone with your profile URL (nextlevel.shanu.dev/u/[username]). You can manage visibility in Settings at any time.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, your profile and catalog data are permanently deleted from our database. Anonymized analytics data is retained by Vercel per their own retention policy.

7. Security

Passwords are hashed before storage. We use HTTPS for all data in transit. Database access is restricted and credential-protected. While we take reasonable precautions, no system is perfectly secure — use a strong, unique password.

8. Your Rights

You have the right to:

Access or export your data by contacting us.
Correct inaccurate information via account Settings.
Delete your account and all associated data from Settings.
Withdraw OAuth access via your Google or GitHub security settings.

For GDPR or CCPA requests, contact us directly and we will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us for removal.

10. Third-Party Links

The Service links to IGDB and other third-party sites. We are not responsible for the privacy practices of those sites. Review their policies independently.

11. Changes to This Policy

We may update this policy. We will update the "last updated" date at the top. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

Privacy questions or data requests: shanu.s@surveysparrow.com.

NextLevel