Privacy Policy

Who we are

Lore is run by Shivansh Shrivastava, an individual based in India, who decides how your personal data is used (the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023). For anything about your data, email shivansh01308@gmail.com.

What we collect

• Your account: your email address. If you sign in with Google, Google also shares your name and a link to your Google profile photo. We only use the name, to suggest a display name.
• Your profile: handle, display name, bio, avatar settings, theme, the vibe you pick, your prompt cards and liner notes (things like city, school, zodiac, only if you add them), and who can see each card.
• Your quiz: the questions you write, their answers and the stories behind them.
• Quiz plays: when you play someone's quiz, which answers you picked, your score and, for guests, the name you typed (if any). Guests get a random token in a cookie so they can come back to their result.
• Friends and safety: friend requests, friendships, blocks and reports you make.
• Usage analytics: events like "profile created" or "quiz completed", with scores and yes/no details only. Never the text of your cards, answers or quiz.
• Error reports: when something crashes, a technical report (the error, the page, browser and device type). We strip out what you typed, your answers and card text before it leaves the app.
• Email preferences: whether you want "someone played your Lore" emails.

We don't ask for your phone number, contacts, location, photos or date of birth, and we don't run ads.

Why we use it

• To run your account and show your page to the people you've chosen.
• To run quizzes, scores, leaderboards and friend requests.
• To send the emails you've switched on (you can switch them off in Me, or from any email).
• To keep people safe: reviewing reports, enforcing blocks, limiting spam.
• To find and fix bugs, and to see which features people actually use.

We use your data because you gave consent when you signed up and ticked that you're 18+. You can withdraw that consent any time by asking us to delete your account.

Who can see what

Public pages and "Everyone" cards can be seen by anyone with your link. "Friends" cards are only for accepted friends. People you block can't see you at all. Share images of quiz results show scores, handles and avatars, never questions or answers.

Services that handle data for us

These companies process data only to provide their service to Lore:

• Supabase: database, sign-in and file storage (servers in Sydney, Australia).
• Vercel: hosting the app.
• Resend: sending emails.
• PostHog: product analytics (EU servers), if enabled.
• Sentry: error reports, if enabled.
• Upstash: rate limiting, if enabled.
• Google: only if you choose "Continue with Google".

This means your data is stored and processed outside India. We only use providers with reasonable security practices, and we'll follow any restrictions the Indian government sets on transfers to particular countries.

Cookies and storage

We use a few essential cookies: one that keeps you signed in, one that remembers a guest's quiz play, and one that remembers who invited you (for 7 days) so we can suggest a friend request. Your browser also remembers whether you've muted the music. No advertising or tracking cookies.

How long we keep it

We keep your data while your account exists. When you delete your account, we delete your profile, cards, quiz, plays and friendships within 30 days; backups roll off shortly after. Error reports are kept for up to 90 days. Reports about other people may be kept longer if we need them to keep someone safe.

Deleting your data

Email shivansh01308@gmail.com from the address you sign in with and say "delete my account". We'll confirm and delete everything within 30 days. Played someone's quiz as a guest and want that result gone? Send us the result link.

Your rights

Under India's DPDP Act (and similar laws elsewhere) you can:

• ask for a summary of the personal data we hold about you and who we've shared it with;
• correct or update it (most of it you can edit yourself in the app);
• have it erased;
• withdraw your consent;
• nominate someone to act for you if you die or can't act yourself;
• complain to us, and if we don't sort it out, to the Data Protection Board of India.

Email shivansh01308@gmail.com. We'll reply within 30 days.

18+ only

Lore is only for people aged 18 and over, and everyone confirms this when they sign up. We don't knowingly collect data from anyone under 18. If we learn an account belongs to someone under 18, we'll delete it. If you think that's happened, tell us.

Security

Data is encrypted in transit, access is locked down so people only see what they're allowed to, and only the operator can reach the admin tools. No system is perfectly secure. If we ever have a breach that affects you, we'll tell you and the Data Protection Board as the law requires.

Changes

If we change this policy in a way that matters, we'll update the date at the top and tell you in the app before it applies. See also our Terms.