Privacy Policy

Last updated September 29, 2026

Lore is run by Joe Lifrieri ("we", "us"). This policy covers www.lore.systems, docs.lore.systems and the Lore app. Lore is in private beta, and this policy describes how it works today. If you have a question, email joe@lore.systems.

The short version

• We collect what we need to run Lore: your waitlist email, your account, the campaigns you play in, error reports when something breaks, and a few usage events so we can see how people get started.
• We don't sell your data, show ads, or use tracking cookies.
• A small set of service providers, listed below, store or process data for us.
• Anything you put in a campaign reaches every member of that campaign. Some content is hidden on screen but is not private from other members (see below).
• You can delete a campaign or your whole account in the Lore app at any time, and it's erased right away.

What we collect and why

Waitlist

When you join the waitlist we collect your email address. We use it only to email you about early access and Lore's launch. Every email has an unsubscribe link, or you can email us to be removed.

Your account

When you sign up for the Lore app, our sign-in provider Clerk collects your username, email address and profile picture, and your password or the account you sign in with (such as Google). Clerk also records sign-in details like your IP address, browser and device, to keep accounts secure. We keep a copy of your account id and username in our database so campaigns know who their members are.

Your email address is shown only to you and to the Owners of campaigns you join.

Campaigns

Lore stores everything you create in a campaign: characters, notes, journal pages, maps, rolls and the activity log, along with which account made each change. We need this to run the campaign and sync it live between players.

Anything you add to a campaign reaches the devices of everyone in it. Owner notes, player journals and a character's private note are hidden from other members on screen, but they are still sent to every member's device, so a member with technical know-how could read them. Only invite people you trust, and don't put anything in a campaign you wouldn't want its members to see. Removed players can't rejoin a campaign.

Error reports

When something goes wrong in the app, it sends an error report to Sentry. A report includes what went wrong, your browser and device type and the page you were on. It also includes a short replay of the page in the moments before the error, with all text masked and images blocked, so we can see what broke without seeing what you wrote. We've set Sentry not to collect your IP address, cookies or request headers.

Usage events

To learn where new players and Owners get stuck, the Lore app records a handful of milestones: signing up, creating a campaign, opening the invite screen, joining a campaign, creating a character, rolling dice, and playing a session with other people. Each event holds your account id, the id of the campaign it happened in, and the time. It never holds your email address, username, campaign names or anything you wrote.

Our servers send these events to PostHog. Nothing is loaded in your browser for this: there's no analytics script, no cookie and no session recording, and PostHog doesn't receive your IP address. The www and docs sites record no usage events.

Abuse protection

To stop people guessing campaign codes, we count attempts per network. We store a one-way scrambled (hashed) version of your network address, not the address itself.

Server logs

Our hosting provider, Vercel, keeps short-lived logs of requests, including IP addresses, to run and protect the sites.

Your browser

The app stores some things in your browser's local storage, such as unsent drafts and interface preferences. These stay on your device.

Cookies

The Lore app uses only the cookies Clerk needs to keep you signed in. These are strictly necessary, so we don't ask for consent. www.lore.systems and docs.lore.systems set no cookies. We don't use analytics, advertising or tracking cookies.

Who processes your data

We use these providers to run Lore. Each gets only what it needs for its job.

• Clerk: sign-in and accounts.
• Liveblocks: storing campaigns and syncing them live.
• Neon: our database, hosted through Vercel.
• Vercel: hosting for all three sites.
• Sentry: error reports and error replays.
• PostHog: usage events.
• Resend: the waitlist mailing list and waitlist emails.

These providers are based in the United States, so your data may be processed there. We'll update this list before we add a provider.

We don't sell or rent your data. We'll only share it with anyone else if the law requires it, or to protect Lore or its users from harm.

How long we keep it

• Waitlist email: until you unsubscribe, ask us to remove it, or we close the waitlist.
• Account and campaigns: until you delete them. Deleting a campaign or your account erases it right away.
• Campaign backups: we keep backup copies of each campaign's contents for up to 30 days, so content you change or remove can stay in a backup for that long. Deleting a campaign erases its backups with it.
• Error reports: up to 90 days.
• Usage events: up to one year. They're linked only to your account id, so once you delete your account they can't be traced back to you.
• Server logs: a few days, per Vercel's retention.

Deleting your data

• A campaign: on the Lore home screen, open the ⋯ menu on the campaign and choose Delete campaign. The campaign, its log and its backups are erased right away, for you and every player in it. Export it first if you want a copy.
• Your account: open the avatar menu in the top-right corner of the Lore home screen and choose Delete account. We erase your account, every campaign you own (with their logs and backups), and your journal, shared notes and draft characters in campaigns you've joined. Characters you played, and their rolls in the log, stay in their Owner's campaign. Older backups of other people's campaigns can still hold what you wrote there until they expire, within 31 days.

If you can't sign in, email joe@lore.systems from the address on your account and we'll delete it for you within 30 days.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, or stop using it. Email us and we'll respond within 30 days. Depending on where you live, you may also be able to complain to your local data protection authority.

Children

Lore isn't for children under 13, and you must be at least 13 (or the minimum age in your country, if higher) to create an account. If you think a child has given us their data, email us and we'll delete it.

Security

We use reputable providers, encrypt connections, and limit who can reach our data. Lore is beta software, though, and no system is perfectly secure.

Changes

If we change this policy, we'll update the date at the top. If a change matters, we'll also tell you by email or in the app before it takes effect.

Contact

Email joe@lore.systems.