Skip to content

Legal

Privacy Policy

Last updated August 2, 2026

This Privacy Policy explains how Lorekeeper Inc. ("Lorekeeper", "we", "us", "our") collects, uses, and protects information about you when you use our services at lorekeeper.tech. We keep this plain and specific.

Information we collect

We collect information you give us directly:

  • Account information: your name, email address, and password (stored as a one-way hash).
  • Campaign data: party details, inventory, location, quest log, and the session beat log you create while playing.
  • Form submissions: messages you send through our contact, support, or careers forms.
  • Payment information: billing details are handled by our payment processor. We receive your plan status and a masked card reference, not the full card number.

We collect information automatically when you use the service:

  • Usage data: which features you use, session counts, and plan limits, used to operate the service correctly.
  • Server logs: request timestamps, IP addresses, and error events, retained for up to 30 days.
  • Cookies and local storage: see our Cookie Policy for details.

We do not collect voice recordings after transcription. Speech is transcribed in the session and the audio is discarded.

How we use information

We use the information we collect to:

  • Operate the game master service, including sending your text and campaign record to the language model on your behalf.
  • Maintain your campaign state across sessions.
  • Process payments and manage your subscription.
  • Respond to support requests, contact form submissions, and data requests.
  • Detect and prevent fraud, abuse, and security incidents.
  • Improve the service, based on aggregated and anonymized usage patterns.

We do not use your campaign story content to train AI models for any purpose other than running your active session. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Sharing information

We share your information only in the following circumstances:

  • Service providers: we share data with OpenAI (language model), ElevenLabs (voice synthesis), and our image model provider to run the game master. These providers process data under their own privacy policies and our data processing agreements with them.
  • Payment processor: billing details are shared with our payment processor to handle subscriptions.
  • Legal requirements: we may disclose information if required by law, court order, or to protect the rights and safety of our users.
  • Business transfers: if Lorekeeper is acquired or merges with another company, your information may transfer to the new owner, who will be bound by this policy or provide equivalent protection.

We do not share your campaign story content with other players unless you explicitly invite them to your table.

Data retention

We keep your account information for as long as your account is active. When you close your account, we remove personal information from active systems within 30 days and from encrypted backups within 90 days.

Campaign data is tied to your account and is removed on the same schedule. Server logs are retained for up to 30 days.

Some information may be retained longer if required by law or to resolve disputes.

Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Request deletion of your account and associated data.
  • Export your campaign data in a portable format.
  • Object to certain uses of your data.

To exercise these rights, go to account settings or email privacy@lorekeeper.tech. We will respond within 14 days.

Children

Lorekeeper is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will remove it promptly.

Players under 18 using Lorekeeper should do so with parental awareness. Our content defaults are family-friendly.

Security

We use HTTPS for all traffic, hash passwords with a strong one-way function, and keep API keys server-side only. See our Security page for more detail.

No system is perfectly secure. If you discover a vulnerability, please report it to us responsibly before disclosing it publicly.

Contact us

For privacy questions or data requests, contact us at privacy@lorekeeper.tech.

Lorekeeper Inc., 10 Dorrance Street, Suite 700, Providence, RI 02903, United States.