Privacy Policy

This policy explains how LoreOwl (“we”, “us”) handles personal information. It covers the website at loreowl.com, the documentation at docs.loreowl.com, the LoreOwl desktop app, the LoreOwl cloud services, and the add-ons and SDKs that LoreOwl places into your game projects.

We decide how your account and website data is used, so for that data we are the controller. For content you and your team store in LoreOwl, and for data your games send us about their players, we act on your behalf. Section 5 explains the player case.

Questions about this policy go to support@loreowl.com.

Account. Your email address, first name and last name. You can add a profile photo, a username, a headline and a short bio. You sign in with a one-time code sent to your email, so we do not store a password. If you sign in with Google, Google shares your name, email address and profile picture with us.

Organization. Your organization’s name and web address, its members and their roles. When an owner invites someone, we store that person’s email address with the invitation.

Your content. Projects and their descriptions, the files and version history you sync, assets in the Vault with their names, tags, descriptions and comments, issues, documents, build records and build logs.

Connected services. When you set them up: your itch.io API key and username, your Epic Games client ID and secret, Discord or Slack webhook addresses for notifications, and the name and region of the storage bucket you use for builds. Keys for your own build storage stay on your computer and are never sent to us.

Billing. Payments are handled by Polar, our merchant of record. We receive your Polar customer ID, billing email, plan, subscription status and billing period. We never receive or store your card details.

Messages. What you send through the in-app feedback form, along with the app version, operating system, organization name and plan so we can reproduce the problem. What you send through the contact form on our website: name, email, studio, team size and message. Your email address if you sign up for the newsletter.

Agreements. Which versions of the Terms of Service, the EULA and this policy you accepted, and when.

Product analytics. The desktop app reports which features are used, for example that a project was created or a build finished. Each event carries your account ID, your organization ID, your operating system and the app version. We do not send names, email addresses, file names or file contents, and the app only forwards event details on an allow-list.

Crash reports. When the app hits an error, it can send the error message and stack trace with your account ID and organization ID. Before a report leaves your computer, the app removes email addresses, access tokens and keys, webhook addresses, signed download links and the username in file paths. IP addresses are not attached.

Service logs and abuse protection. When the app or your browser contacts our servers, our providers record technical details such as your IP address and the time of the request. We use these to keep the service running and to limit abuse, for example by rate-limiting sign-up and feedback endpoints.

On your computer. The app keeps a local database of your projects and settings, and stores your sign-in session encrypted with your operating system’s credential store. This data stays on your device.

Our website. loreowl.com does not use advertising or analytics cookies. The newsletter form saves the time of your last sign-up in your browser, so the form is not submitted twice. Our website host keeps standard server logs.

Videos. Some pages show a demo video from YouTube. Until you press play, the page loads only the video’s preview image from YouTube’s servers. When you press play, the player loads from youtube-nocookie.com and Google’s privacy policy applies to what it collects.

• To provide the service: accounts, sign-in, sync, storage, builds, publishing, analytics dashboards and notifications.
• To bill paid plans and enforce plan limits.
• To answer support requests and fix what you report.
• To keep the service secure and prevent abuse and fraud.
• To understand which features are used and to fix crashes.
• To send service email, such as sign-in codes, invitations and changes to these documents.
• To send the newsletter, only if you asked for it. You can unsubscribe at any time.
• To meet legal obligations.

We do not sell personal information, we do not use it for advertising, and we do not use your content or your players’ data to train AI models.

Legal bases in the EEA and UK

We rely on the contract with you to run the service, on our legitimate interests for security, abuse prevention, product analytics and crash reports, on your consent for the newsletter, and on legal obligations where the law requires us to keep or disclose something.

If you turn on Analytics or the Feedback add-on for a game, that game sends data to LoreOwl about its players. You, the developer, decide what is collected and are the controller of that data. We store and process it for you so you can see it in LoreOwl.

Analytics events carry a random identifier for the installation, a random identifier for each launch, the operating system, game version, build and channel, the locale language, window mode and window size, whether it is a debug build, the SDK version, timestamps, and the event names and values your game records. If the itch.io app launched the game, a hashed itch.io download key is included.

Feedback reports carry the message a player writes, its category and severity, the scene, and any name or contact details the player chooses to type in.

We do not store IP addresses, hardware identifiers or account names with player data. IP addresses are used briefly to rate-limit requests. The SDK lets you offer players an opt-out and a reset of their identifier.

Players who want to access or delete their data should contact the developer of the game. We help developers respond to those requests.

We use the service providers below to run LoreOwl. They process data only to provide their service to us.

Services you connect. When you ask LoreOwl to publish to itch.io, Steam or the Epic Games Store, post to Discord or Slack, or upload builds to your own storage, we send what that action needs to that service. Their privacy policies apply to what they receive.

Your organization. Members of your organization can see your name, username, photo, headline and bio, and the work you add to shared projects.

Legal reasons. We disclose information when the law requires it, or to protect the rights and safety of our users, the public or LoreOwl.

Business transfers. If LoreOwl is sold or merged, information may transfer to the new owner, who must keep honouring this policy for it.

LoreOwl is operated from India, and our data is stored mainly in the United States. Our providers may process it in other countries too. Where the law requires it, we rely on our providers’ safeguards for international transfers, such as the European Commission’s standard contractual clauses.

Deleted data can remain in our providers’ backups for a short time until those backups expire.

You can delete your account in the app under Settings, then Profile, then Delete account. This deletes your profile, your photo, your memberships and your notification history.

Work you shared with an organization stays with that organization, so your teammates do not lose it. It is no longer linked to your account. If you are the only member of your organization, the organization and its content are deleted too. An owner must remove the other members, or cancel an active subscription, before deleting their account.

One exception: version history. Each change you commit records your name and account ID at the time, and that history is part of the project repository and every copy of it. We cannot remove it from repositories that still exist.

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. You can change most of it yourself in the app. For anything else, email support@loreowl.com and we will answer within 30 days.

If you are in the EEA, the UK or Switzerland, you can also complain to your data protection authority.

If you are in India, you have the rights set out in the Digital Personal Data Protection Act, 2023, including access, correction, erasure and grievance redressal. Send grievances to support@loreowl.com.

Traffic to our servers is encrypted. Access to data is limited to your organization by database rules. Publishing credentials such as your itch.io key and Epic client secret cannot be read back by members of your organization, and your sign-in session is stored encrypted on your computer. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

LoreOwl is not for people under 18, and we do not knowingly collect their information. If you believe a child has given us personal information, email support@loreowl.com and we will delete it.

When we change this policy, we update the date at the top. For significant changes we tell you in the app or by email before they apply, and the app asks you to review the new version.

Email support@loreowl.com with any question about this document.