Privacy Policy

This policy explains what LarpedIn (“LarpedIn,” “we,” “us”) collects when you use LarpedIn, why we collect it, who else sees it, and the choices you have. It applies to the LarpedIn website and the features offered through it. It sits alongside our Terms of Service.

The short version: LarpedIn is a public ranking game. Almost everything you put on your profile is meant to be seen by other people, and your career text is sent to an AI provider to be scored. We do not sell your data or use it for advertising.

1. Who is responsible

LarpedIn is the controller of the personal data described here. For any privacy question or request, write to privacy@larpedin.app.

2. What we collect

Account data from your identity provider

When you sign in with LinkedIn, LinkedIn’s OpenID Connect sign-in returns your name, email address and profile photo URL, and nothing else. It does not give us your work history, education, skills, or connections. If you sign in with an email and password instead, we receive your email address and store a hashed credential; we never see your password in readable form.

Profile content you provide

Everything on your competitive profile is entered by you, either through the onboarding form or by pasting or uploading text (such as a résumé) for automatic parsing:

• display name, username, headline, summary and avatar;
• school, country and LinkedIn profile URL;
• work experience, education, skills and projects.

Pasted or uploaded source documents are used to fill in these fields and are not retained as files after parsing.

Gameplay data

Generated as you play: Elo and peak Elo, XP and the XP ledger behind it, wins, losses and battles played, login streak and last login date, achievements unlocked, the battles you appeared in, and the votes you cast.

AI outputs about you

Your career score and its seven sub-scores, the written explanation, your strengths, weaknesses and suggested improvements, the coach tasks generated for you, and an identifier for the model that produced each rating.

Technical data

Our hosting and database providers process standard request data on our behalf, including IP address, user agent, timestamps and error traces, to serve the site and keep it secure. We set essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

3. What is public

Ranked play requires profiles to be comparable, so the following is readable by anyone on the internet, whether or not they have an account:

• your name, username, headline, avatar, summary, school, country and LinkedIn URL;
• your experience, education, skills and projects;
• your career score, sub-scores and its written explanation;
• your Elo, peak Elo, rank tier, win-loss record and achievements;
• the battles you took part in and their outcomes.

These are kept private to you:

• your email address;
• your XP ledger (the individual events that earned you XP);
• your coach tasks and their completion state.

Votes are attributed to the voter in our database but are not shown to the profiles being compared. Do not put anything on your profile that you would not want a stranger, a recruiter, or your employer to read.

4. Why we use it

• To run your account and the game. We authenticate you, show your profile, match you into battles, and maintain ratings, streaks and achievements. Legal basis: performance of our contract with you.
• To generate scores and coaching. We send your profile text to an AI provider and store the result. Legal basis: performance of our contract with you; where required, your consent.
• To keep the ladder fair and the site secure. We detect vote manipulation, duplicate accounts, abuse and attacks. Legal basis: our legitimate interest in a working, safe service.
• To fix and improve the Service. We diagnose errors and look at which features are used, in aggregate. Legal basis: legitimate interests.
• To meet legal obligations and respond to lawful requests. Legal basis: legal obligation.

We do not sell or share personal information for cross-context behavioural advertising, and we do not use your data to serve you ads.

5. Automated processing by AI models

To produce a score or coach task, we send the fields listed under “Profile content you provide” to a third-party large-language-model provider. The current provider is Google (Gemini models); the deployment can be configured to route to another provider through an AI gateway instead. Providers process this data as our processors, under their own terms, and may retain it briefly for abuse monitoring.

These scores are produced automatically and are not reviewed by a human. They are an entertainment feature: they have no legal effect and do not determine access to employment, credit, or any other service. If a score seems wrong you can rescore your profile, edit it, or write to us. See section 8 of the Terms for what the scores are and are not.

Please do not paste confidential documents, another person’s personal data, or special-category data (health, religion, political opinions, and similar) into your profile.

6. Who else we share with

• Other users and the public. The fields listed in section 3.
• Service providers acting for us. Our hosting provider, our database and authentication provider (Supabase), and our AI model provider. They may process your data only on our instructions.
• Your identity provider. LinkedIn learns that you signed in to LarpedIn, and handles that under its own privacy policy.
• Legal and safety. Where we are legally required to disclose, or where disclosure is necessary to investigate abuse or protect someone’s rights or safety.
• Business transfer. If the Service is acquired or merged, data may transfer to the successor, which remains bound by this policy or notifies you of a replacement.

7. International transfers

Our providers operate in the United States and other countries, so your data may be processed outside your own. Where data leaves the European Economic Area or the United Kingdom, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses in our agreements with those providers.

8. How long we keep it

• Account and profile data. Kept for as long as your account exists.
• Ratings, XP events and coach tasks. Kept for as long as your account exists, and deleted with it.
• Battle records. Retained for leaderboard and anti-abuse integrity. When an account is deleted, its battles are deleted along with the profile; where a deleted account voted in someone else’s battle, the vote is kept but detached from the deleted user.
• Backups and server logs. Held for a limited period by our providers and then overwritten on their normal cycle, typically within 30 days.

9. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, export a portable copy, object to or restrict processing, and withdraw consent. You also have the right to complain to your local data protection authority.

You can edit or clear most profile fields yourself at any time from your profile page. Deleting your account deletes your profile and everything linked to it. To exercise any right, write to privacy@larpedin.app from the address on your account; we will respond within one month, or tell you if we need longer.

If you are in California: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, we do not use sensitive personal information for inferring characteristics, and we will not discriminate against you for exercising your rights. The categories we collect and their purposes are listed in sections 2 and 4.

10. Security

Data is encrypted in transit, access to the database is enforced per-row so that private tables are readable only by their owner, and administrative access is limited. No service is perfectly secure; if a breach affects your data and the law requires it, we will notify you and the relevant authority.

11. Children

The Service is not for people under 16. We do not knowingly collect data from them. If you believe a child has given us personal data, write to privacy@larpedin.app and we will delete it.

12. Changes to this policy

We will update the “Last updated” date when this policy changes, and for material changes we will take reasonable steps to notify you before they take effect.

13. Contact

Privacy requests and questions: privacy@larpedin.app. Anything else: legal@larpedin.app.