Privacy Policy
Last updated: February 25, 2026
1. Introduction
Loreweaver is operated by Grinshpon Consulting ENK (Org. nr. 936 927 742 MVA). This policy explains what data we collect and how we use it. The short version: your data is yours, and we only use it to run the service you pay for.
2. Data We Collect
We collect only what you give us:
- Account information — your email address and display name when you sign up.
- Campaign content — the notes, characters, locations, items, and other material you create in Loreweaver.
- Session recordings — audio you upload for transcription.
- Usage data — basic server logs and product analytics needed to keep the service running and improve it (see Cookies & Analytics below).
3. How We Use Your Data
Your data is used to deliver and improve the service you pay for. That means storing your campaigns, processing your session audio, and running AI features against your content. We do this because it's the service you signed up for — that's our legal basis under GDPR (contract performance).
When something breaks — a transcription goes wrong, an entity extraction misses the mark — we look at what happened so we can fix it. That includes looking at your actual content when needed to diagnose a problem. We also use patterns in corrections and errors to improve how the product works for everyone. Our legal basis for this is legitimate interest: we have a direct interest in making the thing you pay for actually work.
Loreweaver is a paid service. You are the customer, not the product. We do not sell your data, serve ads, build advertising profiles, or share your information with third parties for marketing purposes. The only thing we do is make it easy to run a tabletop game.
4. Audio Data & Speech Recognition
Tabletop RPG sessions present unique challenges for speech recognition. Players frequently code-switch mid-sentence — mixing their native language with English game terms, fantasy names, and system jargon. Multiple people may record the same session simultaneously from different devices. Current speech recognition models do not handle these scenarios well.
To build transcription that actually works for tabletop gaming, we may use audio you upload to improve our speech recognition models. This means training and fine-tuning automatic speech recognition (ASR) models so that Loreweaver gets better at understanding the way people actually play. Our legal basis for this is legitimate interest: better speech recognition directly benefits everyone who uses the service.
To be absolutely clear about what this does and does not include:
- Audio may be used to improve our speech recognition models only — the models that convert sound into text.
- Audio is never used to train generative AI models such as large language models (LLMs). Your sessions, characters, and campaign content will never appear in another user's AI output.
- Audio is never sold, licensed, or shared with third parties.
- Models trained on your audio are used exclusively within Loreweaver. They are not sold, licensed, or made available to third parties in any form.
This is enabled by default. You can opt out at any time in your account settings — no explanation needed, no impact on the service you receive. Opting out means your audio is used solely for your own transcriptions and is not included in any model training.
5. Data Residency & Service Providers
All data is processed and stored on cloud infrastructure hosted exclusively within the EU/EEA. Your data never leaves the EU/EEA.
We use a small number of service providers to run Loreweaver. All of them process data within the EU/EEA. A current list is available at Sub-processors.
6. Cookies & Analytics
We use cookies and lightweight product analytics exclusively to improve Loreweaver for paying customers. For example: if an action you perform fails, we use that information to find and fix the problem. If we notice that reaching a common feature takes three clicks, we use that to simplify the navigation. Our legal basis for this is legitimate interest.
This data is never used for advertising, profiling, or sold to third parties. It exists for one reason: to make the product you pay for work better.
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data and receive a copy of it.
- Correct inaccurate or incomplete data.
- Delete your data and account.
- Export your data in a portable format.
- Object to processing based on legitimate interest. For speech recognition model training, use the opt-out in your account settings. For other processing based on legitimate interest, we are a small operation and do not currently offer granular opt-out controls — if the service no longer works for you, you can delete your account and all associated data at any time.
One exception: Norwegian bookkeeping law requires us to retain billing and transaction records for a set period, even after you delete your account. This applies to payment records only, not your campaigns or audio.
To exercise any of these rights, contact us at the address below.
8. Contact
Questions about this policy or your data? Reach us at hello@loreweaver.no.