Privacy
Lorepot is a campaign hub for tabletop groups, run by a solo developer in Belgium. This page describes what data exists, where it lives, and how to get rid of it.
What we store
- Account: your email address, and if you sign in with Discord, your Discord display name. No passwords exist — sign-in is by email link or Discord.
- Campaign content: campaigns, sessions, NPCs and invites you or your DM create. Content is visible only to members of the campaign it belongs to.
- Logs: operational server logs, kept for at most 30 days.
There is no advertising, no tracking pixels, and no sale of data — to anyone, ever.
Where it lives
Data is stored with Supabase in the EU (eu-west-1, Ireland). The application is hosted on Vercel. If a DM connects a Discord webhook, session recaps they choose to send are posted to Discord and become subject to Discord's terms.
Monitoring
When the app itself breaks, a technical error report — what failed and where, never your campaign content — is sent to Sentry, hosted in the EU.
Public pages count visits with Umami, which sets no cookies and builds no personal profiles.
Your rights
You can export any campaign you belong to as a plain folder at any time. To delete your account and everything it owns, or to exercise any GDPR right (access, rectification, erasure, portability), email hello@lorepot.app. Account deletion cascades: your profile, campaigns you own, and their contents are removed.