When you only read
We record anonymous usage: which pages are opened, which buttons are used, page speed, and the referring site. It is not linked to a name or an account, and the address your request comes from is used for security and rate limiting, not to build a profile.
When you have an account
You sign in with Google or with an email address and password. We keep your email, username, display name, avatar if you upload one, your settings, and a securely hashed password if you chose one. Google gives us your name, email and picture; we never see your Google password.
What you post
Theories, mysteries, clues, arguments, comments, votes, predictions and uploaded images are stored with your account. Posts are public by design. Whether your profile and your votes are public is up to you in account settings.
Cookies and local storage
A sign-in cookie keeps you signed in. Your browser also stores a few preferences, such as theme and the lore you read last, and an analytics identifier. We do not use advertising cookies or third-party trackers that follow you to other sites.
Who processes it for us
Vercel hosts the site. Supabase stores the database and uploads. PostHog, on its EU servers, measures usage. Stripe handles payments if you buy a plan; we never see your full card number. When you use the writing helpers or post content, the text is sent to an AI provider to draft, proofread or check it for abuse. Google handles Google sign-in. Each receives only what its job needs.
The Claude and ChatGPT app
The LoreSquare app is read-only and needs no account. What you ask is used to answer that request and is not stored with your identity. Links back to the site carry a tag naming the assistant, nothing about you.
How long we keep it
Account data stays while the account exists. When you delete your account in settings it is scheduled for removal and erased after 30 days, which gives you time to change your mind. Anonymous analytics are kept in aggregate. Payment records are kept as long as tax law requires.
Your choices
You can see and change your data in account settings, hide your profile and votes, and delete the account. For a copy of your data, a correction, or anything else about privacy, write to us through the Feedback link at the bottom of every page and we will answer within 30 days.
Children
LoreSquare is not meant for children under 13, and we do not knowingly keep accounts for them. If you believe a child has made one, tell us and we will remove it.
Changes
When this page changes, the date at the top changes with it. A change that affects how existing data is used will be announced on the site before it applies.