Privacy notice

Who runs Loremark

Loremark is a hobby, made and run by one person: me, Igor. I decide what happens to everything it keeps. Write to me at [email protected] about anything on this page.

What Loremark keeps, and why

• The Waitlist. When you join, Loremark keeps your name, your email, your answer to "What would you collect first?" if you gave one, and when you joined and confirmed. I use them to decide whether there's a place, and to write to you if there is. You asked to join, so the basis is steps you asked for before an agreement (GDPR Article 6(1)(b)).
• An invitation I send by hand. If I invite you without a Waitlist entry, Loremark keeps your email, your name and a line saying how I know you, and my invitation tells you where I got your address. The basis is my legitimate interest in inviting people I know (Article 6(1)(f)).
• Your account. Once you're in, Loremark keeps your email, your display name and what you record: your Memories with their dates, notes and the names you list as With, your photos, the Collections you join, your Marks and Charms, and your Shared Memories. It also keeps your sign-ins, whether you have Pro, and a history of anything I change on your account by hand, such as giving Pro or changing your email. This is Loremark doing what you came in for, so the basis is our agreement (Article 6(1)(b)).
• Shared Memories. When you share a Memory, the people who accept see your display name and the facts of the Memory you share. Your own note and photos in it stay private to you unless you choose to show them, and theirs stay private to them in the same way.
• People named in a Memory. A Memory can name people who were there, and a photo can show them. If someone has named or pictured you and you'd rather they hadn't, write to me and I'll ask them to edit it. The basis is the legitimate interest of the person keeping the Memory (Article 6(1)(f)), and you can object to it.
• When something breaks. When something breaks, Loremark records the error, the page, your browser and your account for 30 days so I can fix it. It never records what you typed, your email or your IP address. The basis is my legitimate interest in keeping Loremark working (Article 6(1)(f)).
• How you use Loremark (only if you said yes). If you said yes when you first came in, or switched it on in Settings, Loremark notes when you open your Cabinet after a while away, lift a Mark, prepare a reel, play or skip a Reveal or a ceremony, and choose Reveal it or Done after recording a Memory that earns a new Mark: each with your account and when, and for a Reveal whether it played in full or short, never what is in your Lore, the page, your device or your browser. It's so I can tell whether people come back, whether they record or only look, and whether Reveals get skipped. The notes are deleted after 30 days, once each week is counted into totals that name no one; I see those totals, never you. Switching it off in Settings deletes your notes at once. The basis is your consent (Article 6(1)(a)).
• What you write to me. Email you send me stays in my inbox, never in Loremark.

What I see

For each account I see its email, display name, when it was made, when it last signed in, whether it has Pro, whether it is suspended, the history of what I've changed on it by hand, what broke for it in the last 30 days, and how many Memories, photos, Collections, Marks and Shared Memories it holds. I see counts of what you keep, never its content: not a Memory, a photo, a note or a name in one.

If you can't sign in and ask for your Lore, I may make your export and send it to your address by hand. I delete my copy once it's sent.

I see weekly totals of how Loremark is used, across everyone who said yes, leaving out my own account. No page shows me one person's use.

Nothing Loremark keeps about you goes into the AI chat I use to write its Collections.

What Loremark never does

No ads, no selling or sharing your data, no third-party analytics, ads or tracking scripts, and nothing about your use unless you said yes. [No tracking in its emails, once the email provider is chosen.] Its one cookie keeps you signed in on that device, for up to 400 days or until you sign out, so there's no cookie banner.

Who else handles it

These services store or send data for me, only as I instruct them, each under a data processing agreement:

• [the host] runs Loremark and its database.
• [the file store] keeps your photos.
• [the email provider] sends Loremark's emails, with open and click tracking off.
• [the domain's mail forwarding] passes what you send to [email protected] to my inbox.

Nobody else gets your data, unless the law makes me hand it over.

Where your data goes

[To confirm once the services are chosen: Loremark and these services are in the United States, so if you live in the EU or the UK, your data goes there when you use it. I use services certified under the EU-US Data Privacy Framework and its UK Extension, whose agreements also include the EU's standard contractual clauses.]

How long it's kept

• A Waitlist entry you haven't confirmed: 7 days.
• A confirmed entry I haven't acted on: 12 months, or until Loremark opens to everyone, whichever comes first.
• An entry I decline, or one you take off the list: deleted at once.
• An invitation from the Waitlist you haven't used: until your entry's 12 months are up. One I send by hand: 12 months from when I first send it.
• A sign-in on a device: until you sign out, or 400 days.
• Your account and everything in it: until you delete it. Deleting your account removes everything at once; copies in Backups are gone within 30 days.
• After you delete your account, a note of its number and when it was deleted, never your email, so that restoring a Backup deletes it again: [how long the note is kept].
• A record of something breaking: 30 days.
• Usage notes: 30 days.
• Email you send me: [how long my inbox keeps it].

What you can ask of me

Write to me at [email protected] and I'll:

• show you what Loremark keeps about you, or give you a copy. Download your Lore in Settings gives you everything you've put in, as files you can read or move: your Memories, photos and what you added to Shared Memories, with the names of the people in them, but never what they added.
• correct it. You can change your display name in Settings, and I change your email when you ask.
• delete it. You can delete your account in Settings, or ask me to. What you added to someone else's Shared Memory goes with it; the Memory stays with them.
• stop or limit how Loremark uses it, including when you're named in someone else's Memory.

I reply within a week and do what you ask within a month. It's free.

If you want to complain

Write to me first, and I'll reply within a week. You can also complain to the data protection authority where you live or work: in the UK, the Information Commissioner's Office; in the EU, your country's authority, which the European Data Protection Board lists.

Who Loremark is for

People aged 18 or older.

If this changes

[Whether I email you when this notice changes in a way that matters to you.]