Loreweaver

✦ Loreweaver

Privacy Policy

Last updated: 21 July 2026

Who we are

Loreweaver (“we”, “us”) is a web application at loreweaver.net that helps you create tabletop role-playing characters. This policy explains what personal data we collect, why, and your rights over it. For any privacy question, contact privacy@loreweaver.net.

Data we collect

When you sign in, we store your email address, and (if you sign in with Google) your display name and profile image. We do not ask for these at a separate sign-up step — they come from your chosen sign-in provider.

When you use the tool, we store the characters you create, the details you provide while creating them, and your subscription status, so we can show them back to you and run your account.

We keep limited diagnostic and security logs (such as request metadata) to operate the service and prevent abuse.

Cookies and similar technologies

Essential cookies keep you signed in and the app working. These are always on because the service cannot function without them.

Advertising and measurement cookies are set by Google AdSense to show ads and measure them. These run only after you consent through our cookie banner. You can change or withdraw consent at any time using the Cookie settings link in the footer.

How we use your data

  • To provide the service — generating, storing, and displaying your characters and managing your subscription.
  • To authenticate you and keep your account secure.
  • To prevent fraud and abuse (for example, throwaway-account farming).
  • To show advertising, where you have consented.

Who we share data with

We use a small number of trusted processors to run Loreweaver:

  • OpenRouter — routes our AI generation requests to the model provider configured at the time.
  • DeepSeek — the character details and interview answers you provide are processed by DeepSeek to generate your character, and may be retained and used by DeepSeek to improve their models.
  • Google — for sign-in (if you use Google) and for AdSense advertising.
  • Resend — to send sign-in (magic-link) emails.
  • Cloudflare — hosting, database, and security.
  • Stripe — payment processing for subscriptions. We never see or store your full card details.

We do not sell your personal data.

Legal bases (UK GDPR)

We process your data to perform our contract with you (providing the service), on the basis of your consent (non-essential cookies and advertising), and for our legitimate interests (keeping the service secure and free from abuse).

Retention

We keep your characters and account data until you delete them or ask us to close your account. Diagnostic and security logs are kept only for as long as needed to operate and protect the service.

International transfers

Generation prompts are processed by DeepSeek. Other processors (such as Google and Cloudflare) may process data outside the UK and EEA; where they do, the transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent. Avoid including personal details you would not want processed in these locations in your character descriptions.

Your rights

You have the right to access, correct, or delete your personal data, to object to or restrict certain processing, and to withdraw consent for cookies at any time (via Cookie settings). To exercise these rights, contact privacy@loreweaver.net. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Children

Loreweaver is not directed at children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; we will revise the “last updated” date above when we do.

← Back to Loreweaver