Privacy Policy

Effective October 29, 2026

What we store

When you sign in, we store your account identifier, name, email, and authentication information needed to keep your session secure. We store the parties, encounter briefs, monster choices, and scene notes you choose to save. Avoid entering sensitive personal information in encounters or support requests.

Where information goes

Convex hosts the database and account service. Netlify hosts this website and receives support-form submissions. PostHog processes the limited product-usage events described below. Resend delivers verification and recovery emails, receiving your email address and a time-limited authentication link. Passwords are securely hashed by our authentication service. When you use the ChatGPT plugin, information you provide or open through its tools is shared with ChatGPT to carry out your request. Website sign-in alone does not give this app access to your ChatGPT conversations.

Retention and deletion

Saved encounters, including trash, remain until you delete your account. Pending AI previews and temporary PDF downloads expire after ten minutes and are cleaned up automatically. Email verification and password recovery links expire after one hour. You can delete your account and its application records from Account settings. Infrastructure logs, email delivery records and provider backups follow the providers’ retention policies and may remain beyond deletion of live records.

Cookies and security

We use authentication storage required for sign-in and sessions. We do not add advertising trackers or sell encounter data. We use PostHog to count page visits, sign-ins, drafts, saves, exports, and ChatGPT tool calls, including completion status and duration. Browser sessions use a random identifier in session storage; account tool usage uses a one-way identifier derived from the account ID. Analytics does not include your name, email, password, encounter text, tool arguments, authentication links, or recordings of your screen. We disable location enrichment and do not forward your IP address to PostHog. Turn off “Allow usage analytics for my account” in Account settings to stop future analytics collection for your authenticated website and ChatGPT activity, including profile checks and background refreshes. The setting does not disable any preparation features. Use “Turn off browser analytics” in the website footer for a browser-only preference; browser Do Not Track and Global Privacy Control are also honored for website activity. Account preferences are retained until account deletion; changing the setting does not delete previously collected events. Access to saved encounters is restricted to the authenticated owner.

Questions and requests

Contact jcole@loreify.ai or use our support page for privacy questions or deletion requests if you cannot access your account. Include only the information needed to resolve your request.