Privacy Policy

Who we are

Lilvra operates lilvra.com. Questions: contact us or [email protected].

What we collect

• Account. Email, display name, password hash or Google sign-in id. We send verification and password-reset mail.
• Games you create. Title, definition JSON, versions, remix credit (who you remixed), publish state.
• Play. An anonymous play count per game. Unlocks, worlds, other progress, and scores while you are signed out stay on this device. If you are signed in, your highest score for a game is stored on your account and shown on that game's public leaderboard.
• AI edits. Prompts and images you attach in the editor are sent to our AI provider (Google Gemini) so the agent can change the game. Do not attach personal photos you do not want processed.
• Contact form. Name, email, message, and a short puzzle token to block bots.
• Technical. IP and user-agent in ordinary server logs, for security and abuse.

What we do not do

We do not sell your data. We do not run advertising or analytics cookies. We do not build marketing profiles. We do not process special-category data on purpose.

Legal bases (GDPR)

• Contract — creating an account, saving games, signing in.
• Legitimate interests — keeping the arcade up, counting plays, stopping abuse.
• Consent — optional email notifications, and AI image uploads you choose to send. You can withdraw consent by turning notifications off (or not uploading images).
• Legal obligation — if we must keep a record (for example a lawful request).

Who we share with

Hosting and database (our infrastructure). Google, if you sign in with Google or use the AI editor (Gemini). Email delivery for account mail. We do not share with advertisers. We may disclose information if the law requires it.

How long we keep it

Account and games until you delete them. Play history on the server: latest runs per account (capped). Server logs: a short rolling window. Contact messages until we have answered them.

Your rights

Depending on where you live you may ask to access, correct, delete, or export your data, or object to processing. Signed-in users can edit their name and delete their account under Account. For the rest, contact us. You may also complain to your local data-protection authority.

Children

You need to be 13 or older to create an account. We do not knowingly collect data from children under 13. If you think we have, write to us and we will delete it.

Cookies and the device

See the Cookie Policy. The consent banner also covers optional email notifications and the Disclaimer.

Changes

If this policy changes in a material way we will update the date above and, if you have an account, we may email you.