Scope and controller

This Privacy Policy applies to the Lorebraid reader and player platform available at lorebraid.com, including account authentication, persistent story saves, story metadata, memories, character galleries, generated media, and related support services.

Lorebraid, operated by the owner of lorebraid.com, is the controller of personal information handled for the service. “Lorebraid,” “we,” “us,” and “our” refer to that service operator. Questions and privacy requests may be sent to [email protected].

Information we collect

Account and authentication information

• Name, email address, verification state, profile image, account identifier, and account role.
• The authentication method connected to the account, such as password or Google, and the provider-specific account identifier.
• Encrypted OAuth tokens where needed to maintain the connection, password hashes handled by the authentication system, session identifiers, and security timestamps.

Story and creative content

• User prompts, storyteller responses, choices, story transcripts, imported story material, scene information, and saved progress.
• Backend story metadata such as long-term memories, temporary context, goals, character state, relationships, skills, inventory, schedule, scene headers, and progression changes.
• Character portraits, reference images, generated images, generation prompts, quality-review information, and character gallery associations.
• Asset filenames and OCR-derived captions when the local OCR feature is used.

Technical and communication information

• IP address, request time, browser and device information, referring information, error details, and security or access logs produced by the application and its infrastructure providers.
• Essential preferences stored in the browser, including theme and interface state.
• Messages sent to the Lorebraid account or support address and transactional-email delivery information.

We receive this information from you, from connected identity providers, automatically from the service and its infrastructure, and from authorized administrators acting on support or security matters.

How information is used

We use personal information to:

• Create and secure accounts, authenticate sign-ins, prevent duplicate identities, and support explicit account migration or provider linking.
• Load, continue, synchronize, import, export, and preserve stories and character galleries.
• Generate contextual story text and images, review generation quality, maintain continuity, and display progression updates.
• Deliver verification, password-reset, and service-related emails.
• Detect abuse, enforce safety rules, diagnose failures, protect users and infrastructure, and maintain administrator audit records.
• Respond to support, privacy, legal, and security requests and comply with applicable law.

Where applicable, these uses rely on performance of our agreement with you, our legitimate interests in operating and securing Lorebraid, your consent when connecting an optional identity provider, and compliance with legal obligations. You may disconnect an optional provider by contacting us, provided another secure sign-in method remains available.

We do not sell personal information, share it for cross-context behavioral advertising, or use Google account information for advertising.

AI processing

To continue a story, Lorebraid sends the current prompt and a bounded selection of relevant story context to the configured AI provider. This may include recent conversation, story foundations, active goals, selected memories, character relationships, status, and other continuity information. The complete long-term archive is not intentionally sent with every request.

For image generation and quality review, Lorebraid may send the requested scene description, visual canon, character descriptions, and relevant reference portraits. Generated text, images, prompts, and quality-review outcomes may be saved back to the account’s story timeline and galleries.

The hosted service currently uses OpenAI for supported text and image generation. A local deployment may instead use a locally configured provider such as Ollama. Lorebraid does not intentionally include your account email or OAuth identifier in an AI prompt unless you place that information in story content yourself.

Lorebraid does not use your content to train a public Lorebraid model. Third-party AI providers process submitted material under their applicable service terms, privacy commitments, and account settings.

Processors and disclosures

We disclose information only as needed to operate, protect, or lawfully support the service. Current categories of service providers include:

We may also disclose information to professional advisers under confidentiality, during a legitimate business reorganization, to protect rights or safety, or when reasonably required by law, court order, or valid legal process. We do not disclose private story content publicly unless you deliberately publish or share it through a future sharing feature.

Administrator access

Authorized Lorebraid administrators can access user identity records, connected providers, story progress, conversation timelines, backend story state and memories, generation prompts, and generated images when reasonably necessary for service operation, debugging, support, safety, abuse prevention, or legal compliance.

Administrator access is restricted to verified privileged accounts, requires a recent authenticated session, and is recorded in an administrator audit log. Administrative access is not used to publish a user’s private story or for advertising.

Cookies and local storage

Lorebraid uses essential authentication cookies to maintain secure sessions and prevent request forgery. Browser local storage may remember theme and interface preferences. These technologies are required to provide the requested account and interface functionality.

Lorebraid does not currently operate third-party advertising cookies or behavioral analytics trackers. Google may use its own cookies when you leave Lorebraid and authenticate on its domain; Google’s policies govern that interaction.

Retention and deletion

Account records, active sessions, story saves, persistent metadata, conversations, and generated galleries are generally kept while the account remains active so that stories can continue across sessions. Security logs, delivery records, and administrator audit entries are retained for as long as reasonably needed for security, troubleshooting, accountability, and legal obligations.

You may request account and content deletion by emailing [email protected] from the account’s email address. We may need to verify the request. Deletion removes or de-identifies information from active systems except where retention is required for security, fraud prevention, legal claims, compliance, or limited backup integrity. Infrastructure backups and cached copies may expire on their normal protected schedules.

Security and international transfers

Lorebraid uses account-scoped storage, encrypted transport, encrypted OAuth-token storage, hashed passwords, origin checks, restricted administrative routes, recent-session requirements for sensitive administration, rate limiting, and audit logging. No online service can guarantee absolute security, and users should protect their credentials and immediately report suspected compromise.

Service providers may process information in the United States, European Economic Area, or other countries where they or their subprocessors operate. Where required, these transfers rely on provider contractual safeguards, adequacy mechanisms, or other lawful transfer tools.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, withdraw consent, and appeal or complain about how a request is handled. EEA and UK users may complain to their local data-protection supervisory authority.

Submit a request to [email protected]. We may request reasonable verification and may decline or limit requests where permitted by law, including where necessary to protect another person’s rights or the security of the service. Lorebraid will not discriminate against users for exercising applicable privacy rights.

Age requirements

Lorebraid is intended for adults and is not directed to children. You must be at least 18 years old, or the age of legal majority where you live if higher, to create an account or use the hosted service. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.

Lorebraid prohibits romantic or sexual content involving minors, including fictional, fantasy, or age-ambiguous depictions.

Changes and contact

We may update this policy when the service, providers, or legal requirements change. The effective date will be updated, and material changes may be announced through the service or by email when appropriate. Continued use after an update is subject to the revised policy, without limiting rights that require separate consent.