Privacy Policy

Version 1 · Last updated October 25, 2026

The short version

1. Who is responsible

The Foolore team runs Foolore and is the controller of your personal data. We are not yet incorporated; this policy will name our company once it is registered. Contact for all privacy questions, including our privacy officer: [email protected].

2. What we collect and why

DataWhyLegal basis (EU/UK)
A random account ID for your device, and the time and version of the terms you accepted To run your games, apply usage limits and record your consent Contract; legal obligation (consent records)
What you type in a game, your character, and the story context the game sends with it To generate the story; it passes through our server to AI providers and is not stored on our server after the reply Contract
Usage records: time, purpose, model, number of tokens and cost of each AI request To enforce limits, control costs and prevent abuse Legitimate interests
Your email address, if you join the waitlist To send one email when Foolore is released Consent (you can withdraw it at any time)
Email and a hashed password, for invited test accounts only To sign you in Contract
Reports you send with the Report button: your message, the game transcript, your character, the app version and platform To find and fix problems and make the stories safer Legitimate interests
IP address and technical request data (in short-lived server logs and in memory) Security, rate limiting and keeping the service running Legitimate interests

Please do not type sensitive personal information (such as health details or other people’s data) into a story. Your saved games, settings and the story files live in the app’s storage on your device (in the browser, local storage that the game needs to work), and we cannot see them unless you send a report.

We do not use your data for advertising, we do not build marketing profiles, and we do not make decisions with legal or similarly significant effects about you by automated means. We do not use your games to train AI models.

3. Who processes it for us

We may disclose data if the law requires it, to protect people from harm, or as part of a future merger or sale of Foolore, in which case this policy continues to protect it.

4. International transfers

Some of these providers are in the United States or other countries outside your own. Where EU/UK law applies, transfers rely on adequacy decisions (such as the EU–US Data Privacy Framework) or standard contractual clauses. Data from Canada may be processed outside Canada, where the local authorities may be able to access it.

5. How long we keep it

When the prototype ends, we delete the data we no longer need for it.

6. Your rights

Wherever you live, you can ask us to access, correct or delete your personal data, and to stop using your email. Write to [email protected]; for a guest account, include the account ID shown in the app’s profile, or the email you used. We answer within 30 days and may need to confirm the request comes from you.

European Union and United Kingdom (GDPR)

You also have the right to data portability, to restrict processing, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting earlier processing. You can complain to your local data protection authority.

United States (including California, Colorado, Virginia, Connecticut and other state laws)

You have the right to know what personal information we collect, to delete it, to correct it, and not to be treated differently for using these rights. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. An authorised agent may make a request for you.

Canada (PIPEDA and Quebec’s Law 25)

You can access and correct your personal information, withdraw consent, and ask about our practices. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d’accès à l’information.

7. Cookies

The website uses no cookies and no analytics, and its fonts are hosted by us. The game stores your progress in your device’s local storage, which is necessary for it to work. Cloudflare may set strictly necessary security cookies.

8. Children

Foolore is for people aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a child has used Foolore, write to us and we will delete the data.

9. Security

Data travels over encrypted connections (HTTPS), passwords are hashed, access to our server is limited to the team, and we keep only what we need. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the authorities as the law requires.

10. Changes

We will update this policy as Foolore changes. For an important change we will tell you in the app before it applies. The date at the top shows the current version.