Privacy
You can use LoreScroll without an account. Feed, Find, Read, Watch, Mark and Keep work with no sign-in, and then LoreScroll's server stores nothing about you.
An account is optional. It exists only to save your progress across devices and to send letters (a card, night or clip, with a short message) privately to friends you invited.
What stays on your device
Your Marks, Keep list and shelves, what you have already seen, your sound setting and soft-launch stats are saved in your browser's local storage. Without an account none of it is sent to LoreScroll. Clearing your browser data deletes it. Signing out of an account keeps this local copy.
If you create an account, we store
- Email address: to sign you in, confirm it's yours, and send password reset links. Never shown to other users.
- Password: stored only as a salted, one-way hash (PBKDF2-SHA256). We cannot read it.
- Display name and seal colour: shown only to friends you have accepted.
- Your confirmation that you are 13 or older.
- Synced Keeps, shelves and seen nights, if you choose to add them to your account.
- Friends, blocks and invite links you create.
- Letters you send and receive: the message text, the attached card/night/clip, the date, and whether you (the recipient) have opened it. The sender is never told whether you opened a letter.
- Sessions: a random sign-in token in a cookie; we keep only a scrambled (hashed) copy, its dates, and a rough device label like "iPhone Safari".
- Reports you file or that are filed about a letter, including a copy of the reported letter.
- Security counters: to limit password guessing, we briefly keep a hashed form of your IP address with a count, for up to 1 hour. We do not keep IP logs otherwise.
We do not collect your contacts, location, or anything for advertising. There are no follower lists, public profiles, or user search.
Why (legal bases)
To provide the account you asked for (contract); to keep it secure and prevent abuse (legitimate interest); to meet legal obligations.
Where it is stored and who processes it
- Cloudflare (hosting, database in Cloudflare D1, Turnstile bot check on sign-up and password reset, email forwarding for hello@). Turnstile checks your browser for signs of a bot; see Cloudflare's privacy policy.
- Cloudflare Email Sending sends the sign-up confirmation, password reset and account-deleted emails. It receives your email address and the message.
Data may be processed outside your country, including in the United States.
We email you only to: confirm your address, reset your password, tell you an account already exists for your email, and confirm account deletion. No newsletters, no marketing, no "come back" or activity emails.
Cookies
LoreScroll sets one cookie, only when you sign in: ls_s, a sign-in session cookie (HttpOnly, Secure, lasts 30 days from your last visit, removed when you sign out). It is strictly necessary, so there is no cookie banner. No analytics or ad cookies. YouTube embeds (youtube-nocookie.com) may set their own cookies under YouTube's terms when you play a trailer.
How long we keep it
- Account data, synced Keeps, friends and letters: until you delete them or your account. Letters do not expire. Deleting a letter removes it from your view; it is erased once both people have deleted it or either account is deleted.
- Unconfirmed accounts: deleted after 7 days.
- Sign-in sessions: 30 days after last use. Reset links: 30 minutes. Confirmation links: 24 hours.
- Reports: 12 months, with your identifiers removed if your account is deleted.
- Backups: our database keeps a rolling point-in-time backup for 30 days (Cloudflare D1 Time Travel). Deleted data is fully gone from backups within 30 days.
Your choices and rights
- Download your data: You → Account → Download my data (a JSON file).
- Delete your account: email [email protected] from the email address on your account and ask us to delete it, and we will, or use Delete account in the You tab. Your account, friends, blocks, sessions, synced data, and all letters you sent and received are deleted (and from backups within 30 days). Your friends' copies of letters with you are deleted too. Local data on your phone stays until you clear it.
- Change your display name, seal colour or password in You. Sign out everywhere in You.
- Block or report anyone from any letter.
- You can also ask us at [email protected] to access, correct, or delete your data, or object to processing. You may complain to your data protection authority.
What we do not do
LoreScroll uses Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites. No ad network, no tracking pixels, no sale or sharing of personal data, no public profiles, no follower counts, no feed of friends' activity.
What your browser fetches from other sites
Article text, search results and lookups come from Wikipedia and Wikidata (your Find searches go to Wikipedia). Pictures come from Wikimedia Commons. Trailers are YouTube embeds. Those sites see your IP address and the page they serve.
Children
LoreScroll is not directed at children under 13 and accounts are for people 13 or older. If you believe a child under 13 has an account, email [email protected] and we will delete it.
Changes
We will update this page before any change in what we store, and show the date below.
Last updated: October 25, 2026. Contact: [email protected].
Independent. Not endorsed by or affiliated with Wikipedia or the Wikimedia Foundation.