Privacy policy

Level Up Tech (“we”) operates leveluptech.org. This page explains how we handle information when you visit our site or contact us.

Information we collect

When you use our contact form or email us, you provide information such as your name, company, email address, and message content. Contact form submissions are delivered to us by FormSubmit (formsubmit.co), which processes the message so it can reach our inbox. Our website may also collect standard server logs (IP address, browser type, pages visited) through our hosting provider, Cloudflare.

Analytics

We use Google Analytics 4 to understand how the site is used (for example, pages viewed and whether someone starts a contact action). Google may set cookies or similar identifiers and receive usage data under Google’s privacy policy.

Public tools

The public tools run in your browser or via our Cloudflare Pages functions. Domain and email checks send the value you type to our edge APIs for that request (DNS helpers, RDAP, breach catalog, TLS probes). For a work email, the breach check gives a playbook and a link to Have I Been Pwned rather than looking up the mailbox here. We do not keep a searchable archive of those lookups for marketing, but standard edge/request logs may briefly include query parameters. The email check also uses Cloudflare DNS-over-HTTPS in your browser. The TLS check may read public certificate transparency data from crt.sh (not a live handshake certificate dump). Health check, readiness, stack chooser, AI policy starter, and phishing trainer stay on your device until you choose to email us. Ask Level Up is a browser chat over a published copy of our own pages. A hidden lab option can opt in to on-device WebGPU inference with open model weights from Hugging Face / MLC hosts; we do not host a cloud LLM for that chat and we do not keep a searchable archive of Ask messages on our servers beyond normal static-asset and edge request logs.

The status board fetches our status JSON (via /api/lut-status), Google’s public Workspace incidents, Microsoft host reachability (via /api/m365-status), and additional public vendor feeds and probes (via /api/status-extras) for Cloudflare, AWS, public DNS, Apple, Zoom, Slack, Duo, and Okta. Do not enter passwords, MFA codes, or vault data into any tool. The phishing trainer uses fictional samples only and never sends mail.

Fonts are served from leveluptech.org. No font requests go to third parties.

How we use it

We use contact information to respond to inquiries and provide services you request. We use analytics to improve the site. We do not sell your personal information.

Contact

Questions about this policy: help@leveluptech.org.