SYSTEM DOCUMENT · PRIVACY
Privacy Policy
Last updated: 28 October 2026
SLVL is a real-life fitness game run from New Zealand. This page explains what information SLVL collects, why, who can see it and how long it is kept. We follow the New Zealand Privacy Act 2020.
What we collect
- Account: username, email address and your password (stored only as a one-way encrypted hash).
- Game data: missions, EXP, level, Rank, attributes, streaks, achievements, titles and settings.
- Fitness data you enter: experience, goals, working loads, running and conditioning capacity, and personal records.
- Social data: Player ID, friends, Guild membership, Arena challenges and results, and leaderboard positions.
- Evidence: video links or videos you upload, and private ID images for Rank verification.
- Technical data: a sign-in cookie, IP address and error logs, used for security and to stop abuse.
Why we use it
- To run the game, personalise your missions and track your progress.
- To review evidence for Rank, Verified Feats, Gates and Arena results.
- To send verification codes and important account emails.
- To keep accounts secure and the game fair.
We do not sell your information and we do not show advertising.
Who can see it
- Other players: your username, Player ID, Rank and level. If your profile is public, also your character, progress, Guild, Arena record and approved Verified Feats.
- System reviewers: evidence and ID images, only to make review decisions.
- Service providers that run SLVL for us: website hosting, Brevo (email delivery), Google Drive (private storage for uploaded evidence videos) and Google Fonts (text style). These providers may store data outside New Zealand.
Google user data
SLVL connects to one Google Drive account owned by the SLVL operator, using only the drive.file permission. This lets SLVL create and manage the evidence videos it uploads, and nothing else in that Drive. Players can choose to sign in with Google. SLVL then receives only their Google account ID, email address and name (the openid, email and profile permissions) to create and sign in to their SLVL account. SLVL never reads anything else in a player's Google account and never posts on their behalf.
Uploaded evidence videos are stored privately, are not shared publicly, can only be watched by System reviewers, and are deleted automatically 30 days after review.
SLVL's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Facebook user data
Players can choose to sign in with Facebook. SLVL then receives only their Facebook user ID, name and, if they allow it, their email address (the public_profile and email permissions). SLVL uses this only to create and sign in to their SLVL account. SLVL never reads their friends, posts or photos and never posts on their behalf.
How long we keep it
- Uploaded evidence videos: deleted automatically 30 days after review.
- Private ID images: removed after the review retention period set by the System.
- Account and game data: until you ask us to delete your account.
Delete your data
To delete your SLVL account and all of its data, including any Facebook or Google sign-in link:
- Sign in to SLVL (with Facebook, Google or your password).
- Open your account settings (profile.php) and scroll to Danger Zone.
- Press Delete account and confirm. Deletion is permanent.
If you only ever signed in with Facebook or Google, first use Forgot password on the login page to set a password, or email us and we will delete it for you. You can also remove SLVL from Facebook at any time in Facebook: Settings & privacy → Settings → Apps and websites.
Your rights
You can ask to see or correct your information, download a copy of your data, or have your account deleted. If you are not happy with how we handle a privacy request, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Contact: vanskie1@gmail.com
Changes
If this policy changes, the new version will be posted on this page with a new date.