Privacy Policy

Draft — last updated September 30, 2026. Effective when published.

Lore is a private space for friend groups to save shared memories and play a timeline game with them. This policy explains what we collect, why, who can see it, how long we keep it, and the choices you have.

The short version: what you add to a group is visible only to the people in that group. We don't sell your data, we don't show ads, and we don't use third-party analytics or tracking cookies. You can download your data or delete your account at any time.

Who we are

Lore is operated by [COMPANY NAME], [ADDRESS] ("we", "us"). Contact: [privacy@YOUR-DOMAIN].

What we collect

Information you give us

Account information: your name, email address, and password. Passwords are handled by our authentication library, which stores only a salted, one-way hash — never the password itself. We also record when you confirmed you are 18 or older and accepted our Terms.
Google sign-in (optional): if you choose "Continue with Google", Google shares your name, email address, Google account identifier and profile picture address with us. We store these with your account. We don't display your Google profile picture.
Groups: group names, who is in each group, and each member's role (admin or member). Invite links are stored only as a one-way hash.
Memories: the titles, stories, dates (including approximate dates), places (free text you type — we don't collect GPS location), who you tag, reactions, and whether a memory is included in games.
Photos and videos: files you upload to a memory. See "How we handle photos and videos" below.
Game activity: games you join, where you placed each memory, your scores, and in Gaslight games your 🚩 flags and your vote for the fake.
Gaslight games: memories you write for a Gaslight game are hidden from everyone until the game ends; then real ones join the group's archive like any other memory. The fake memory is deleted along with its photos when the game ends; its title and caption remain in that game's recap so the group can see what the fake was. Everyone in the group learns who the gaslighter was once the game ends.
Reports: if you report content or a person, the reason and any details you write.

Information collected automatically

Session and security data: when you sign in we store a session record with your IP address and browser user-agent, used to keep you signed in and to protect your account. Session records are deleted when they expire or when you sign out everywhere.
Rate-limiting data: to prevent abuse (for example password guessing), we keep short-lived counters keyed by IP address or account ID. These are deleted within about a day.
Daily activity marker: for each day you use Lore, we store the date (no content, no location, no device details). We use this only to calculate aggregate numbers such as how many people use Lore each week.
Server logs: our servers log technical events — for example which endpoint was called, the response code, how long it took, and internal IDs of the account, group or memory involved. We deliberately do not log memory titles or stories, captions, file contents, passwords, tokens or email addresses.

We do not use advertising, third-party analytics, tracking pixels, or cross-site tracking.

How we handle photos and videos

Files are stored in private cloud storage that is not publicly accessible. Each time someone opens a photo, we first check they are a current member of the group, then give their browser a temporary link that expires within about two hours. Anyone who obtains such a link before it expires could open that one file, so don't share those links.
Photos are re-processed when uploaded. We create new copies at display and thumbnail sizes and remove embedded metadata — including GPS location, camera make/model and capture details. The original file is deleted after processing.
Videos (MP4/MOV) are stored in their original encoding, but we erase known metadata containers where phones record location and device details, and clear the embedded recording timestamps. Some specialized metadata streams may remain. WebM videos are checked but not rewritten. If a video's metadata matters to you, remove it before uploading.
Uploads that are never attached to a saved memory are automatically deleted after 24 hours.

Why we use your information

To provide Lore: create your account, run your groups, store and show memories, run games and keep score.
To keep Lore safe: authenticate you, prevent abuse and fraud, rate-limit attacks, review reports and enforce our Terms.
To communicate with you: send account emails such as email confirmation and password resets. We don't send marketing email.
To understand usage in aggregate: for example how many groups are created or games completed. These metrics are computed from our own database and do not include the contents of your memories.
To comply with law and respond to lawful requests.

Your group: everything you add to a group — memories, photos, videos, tags, reactions and game results — is visible to everyone who is currently a member of that group. Members see each other's names, not email addresses. Anyone who joins later (for example via an invite link) can see the group's existing history.
Group admins can remove members, delete any memory in the group, and delete the whole group — including memories you added.
Service providers who process data for us under contract, only to run Lore:
Hosting: [e.g. Vercel] — [REGION]
Database: [e.g. Neon PostgreSQL] — [REGION]
File storage: [e.g. Cloudflare R2] — [REGION]
Email delivery: [e.g. Resend]
Sign-in with Google (only if you use it): Google
Bot protection on sign-up, sign-in and password reset: Cloudflare Turnstile, which receives your IP address and browser signals to tell people from bots [CONFIRM IF ENABLED]
Password breach check: when you choose a password we send the first five characters of a one-way hash of it to Have I Been Pwned to check it against known breaches. Your password itself is never sent.
Lore staff may access specific content when necessary to investigate a report, respond to your support request, fix a problem, or comply with law. Access is limited to what's needed.
Legal requirements: we may disclose information if required by law or to protect people's safety. We will report apparent child sexual abuse material to the relevant authorities as required by law.
Business transfers: if Lore is acquired or merged, your information may transfer to the new owner, who must honor this policy or notify you.

We do not sell your personal information and we do not share it for targeted advertising.

People in your photos

Memories often include other people. Please only upload photos and videos you have the right to share, and be thoughtful about content your friends wouldn't want in the group. Anyone tagged in a memory can remove their tag. If a memory or photo of you is in a group you're in and you want it removed, ask the person who added it or a group admin, or report it to us.

How long we keep information

Your account: until you delete it.
Memories, photos and videos: until deleted by the person who added them, a group admin, the deletion of the group, or deletion of the uploader's account.
Deleted content and accounts: removed from our live database immediately. Stored files are queued for deletion and normally removed within minutes (failed deletions are retried automatically). Copies may remain in encrypted database backups for up to [BACKUP RETENTION, e.g. 7] days until the backups expire.
Unsaved uploads: deleted after 24 hours.
Sessions: expire after 30 days without use; sign-in and password-reset links expire after 24 hours and 1 hour respectively.
Invite links: stop working when they expire or are turned off; their records are purged 30 days later.
Rate-limit counters: about one day.
Daily activity markers: until your account is deleted.
Server logs: [LOG RETENTION, e.g. 30] days, per our hosting provider's settings.
Reports: kept as safety records for [REPORT RETENTION]; if you delete your account, reports you filed are kept without your identity.

Your choices and rights

Download your data: Account & privacy → "Download my data" gives you a copy of your account information, memories you added, uploads, tags, reactions and game history.
Correct your data: edit your name and any memory you added.
Delete content: delete memories you added; when leaving a group you can choose to delete everything you added there.
Remove tags: untag yourself from any memory.
Delete your account: Account & privacy → "Delete my account". This deletes every memory you added in every group (with its photos and videos), anything you uploaded, your tags, reactions and game scores, and any group where you are the only member. Memories other people added are not deleted.
Contact us at [privacy@YOUR-DOMAIN] for any other request. We may need to verify your identity.

Depending on where you live, you may have additional rights under laws such as the GDPR or state privacy laws, including rights to access, correct, delete, port or object to processing, and to complain to a data protection authority.

Leaving groups and deleted groups

When you leave a group, you lose access immediately and your tags there are removed. Memories you added stay in the group's history, shown as added by "a former member", unless you choose to delete them when leaving. If a group admin deletes a group, all of its memories, photos, videos and game history are deleted for everyone.

Cookies

Lore uses only essential cookies needed to keep you signed in and to protect against cross-site attacks. We don't use analytics, advertising or tracking cookies.

Security

We use encryption in transit (HTTPS), hashed passwords, private file storage with short-lived access links, authorization checks on every request, rate limiting, and a strict content security policy. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as required by law.

Age requirement

Lore is only for people 18 and older. We ask you to confirm your age when you create an account; we don't verify it. If we learn that someone under 18 has an account, we will delete it. If you believe a minor is using Lore, contact us.

International users

Lore is operated from [COUNTRY] and your information is stored and processed in [REGIONS]. If you use Lore from elsewhere, your information will be transferred to those locations.

Changes to this policy

If we make material changes, we'll ask you to review and accept the updated policy the next time you open Lore. The date at the top shows when it last changed.

Contact

[COMPANY NAME] · [ADDRESS] · [privacy@YOUR-DOMAIN]