Privacy Policy

Effective 4 June 2026 · lorewend.app

This policy explains what personal data lorewend collects, why, and the choices you have. It applies to lorewend.app and works alongside our Terms of Service.

1. Who we are

lorewend (lorewend.app) is operated by Ivan Molčan, the data controller for the personal data described here. Contact: support@qedamio.app.

2. What we collect

Account — your email, a provider id, and display name from Google or Discord when you sign in.
Campaign data — the game saves you create (characters, world, journal). Stored on our servers so you can play from anywhere.
Subscription — we store your Stripe customer id, subscription id, and status. We never see or store your card details — payment is handled entirely by Stripe.
Technical — request metadata and minimal logs needed to run and secure the service.

3. Your AI runs on your own subscription

The assistant that narrates your game runs on your AI provider (e.g. Anthropic / OpenAI), not ours. We only receive the structured game actions your client sends to our engine. Your use of that AI is governed by that provider's own privacy policy.

4. How & why we use it (legal bases)

To provide the service and bill it (performance of our contract with you); to secure and operate it and prevent abuse (our legitimate interests); and where the law requires, with your consent. We do not sell your data or use it for advertising.

5. Who we share it with

Only the processors needed to run the service: Cloudflare (hosting + database), Stripe (payments), and your chosen login provider (Google or Discord). Each handles your data under its own terms. We may disclose data if required by law.

6. Retention

We keep account and subscription data while your account is active. Campaign saves follow the retention policy in the Terms (idle free campaigns archived after ~30 days, eligible for deletion after ~90). You can export your campaigns at any time, and deleting your account removes your personal data (subject to limited legal/accounting retention for billing records).

7. Your rights

Under the GDPR and similar laws you can access, export (data portability), correct, delete, restrict, or object to the processing of your personal data, and withdraw consent where it applies. The in-app export gives you a portable copy of your campaigns, and Dashboard → Delete account erases your account and all game data immediately (payment records remain with Stripe for bookkeeping). To exercise any right, contact support@qedamio.app. You also have the right to complain to your local data-protection authority.

8. Cookies

We use only strictly necessary cookies — a signed session cookie to keep you logged in and anti-CSRF tokens. We use no advertising, analytics, or tracking cookies, so no cookie-consent banner is needed.

9. Security & international transfers

Data is encrypted in transit, sessions are signed, and access is gated per account. Our providers (Cloudflare, Stripe) operate globally, so your data may be processed outside your country under the safeguards those providers maintain.

10. Children & changes

The service is not directed at children under 16 (or the minimum age for valid consent where you live). We may update this policy; material changes are posted here with a new effective date.