Website form information

Privacy, in plain language.

This notice explains the website forms and the choices around beta emails and feedback. It does not describe the Android app’s permissions or health data.

Who is responsible

Artur Dymerski is responsible for information submitted through the website forms. Use the contact below for privacy questions.

Privacy contact: hello@leveldeck.app

What the website forms are for

Contact and collaboration proposals

A contact message uses your email address and message, with an optional name. A collaboration proposal may also include an organization or project and a topic. These details are used to review and respond to the message.

Android beta interest

Beta interest uses your email address, your email permission and any optional note about your goals. The live process requires you to confirm your email before beta messages are enabled. Registration does not guarantee app access.

Feedback and publication permission

Feedback includes your experience choice and comment, with an optional email for follow-up. It stays private by default. Publication requires separate permission and a display name, and submissions are reviewed before any public use. Your email is not published alongside the feedback.

Please leave out sensitive personal information. The website forms do not ask for app health records, private journal entries or device activity history.

Storage, email and abuse prevention

Cloudflare Workers serves the site and processes forms; D1 stores submissions; Turnstile checks for abuse using connection and browser information. Resend receives email addresses and notification content. Submissions include language, time, an identifier and privacy-notice version. Abuse limits use a short-lived keyed IP hash; our submission database does not store raw IP addresses.

The website has no analytics or advertising pixels. Turnstile verification is active on forms. These submissions do not make automated decisions about app access.

How long information is kept

The periods below apply to the website submission database, starting at submission or email confirmation, whichever is later. Automatic erasure runs periodically. Copies in mailboxes and provider systems follow the separate arrangements described below.

Contact and collaboration messages: 180 days
Beta interest and confirmation records: 365 days
Private feedback and publication permission: 365 days

Your choices and requests

The live beta emails must include a way to unsubscribe. To ask about your website submission, request correction or removal, or withdraw feedback publication permission, use the confirmed privacy contact above.

Back to LevelDeck

Legal bases, rights and processing details

Artur Dymerski, the creator of LevelDeck, is the controller for these website forms. For data inquiries, use the email address above. These forms relate to the website and do not create an app account. Contact and collaboration submissions are used to reply and discuss your inquiry. The legal basis is the controller’s legitimate interest in correspondence and developing the project. Beta interest and invitation updates rely on your voluntary consent, confirmed by email. Publishing feedback with your chosen display name requires separate consent and moderation. Spam prevention relies on the legitimate interest in keeping the website secure. We do not sell submissions or use them for advertising profiling. Providing data is voluntary. An email address is needed for replies and beta confirmation; feedback can be sent without an email address. Please do not submit health details, passwords or information about other people. For an enquiry concerning a child, a parent or guardian should contact us without unnecessary details about the child. Age and testing eligibility will be established before an app invitation. Cloudflare provides hosting, submission storage and Turnstile verification; Resend delivers emails. These providers and their subprocessors may process data outside your country, the EEA or the UK, including in the US. Their data processing agreements describe transfer safeguards, including standard contractual clauses where applicable. You can contact the controller for information about providers and safeguards. Infrastructure services may process IP addresses and connection information; the submission database does not store raw IP addresses. Website records are erased after the periods shown above. You can withdraw beta consent or remove feedback using the private link or by email. Copies in the controller’s mailbox are reviewed and deleted within 365 days unless ongoing correspondence, a contract or a legal duty justifies keeping necessary information. Provider logs and backups follow their contractual retention arrangements and legal duties; removing a database record does not immediately erase every email copy. Subject to applicable law, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing. You may complain to the relevant supervisory authority, including the ICO in the UK or UODO in Poland.