Privacy

This covers the Lorestar website, your account on it (which other Lorestar products on lorestar.net sign in with), and the license check the Lorestar app makes. It is written by [legal entity name: placeholder]. Your worlds and campaigns live in the app on your own computer; they never come to us and aren't covered here because we never have them.

Last updated 15 October 2026

What we hold, and why

• Your account: your email and, if you give one, a display name, so you can sign in, keep your license and alpha keys, and get the installers. Passwords are kept only as scrypt hashes; two-step sign-in secrets are encrypted.
• Your keys: the license keys and alpha keys on your account, kept encrypted so your account page can show them to you again whenever you need them. For looking a key up we keep a one-way hash of it and its last few characters.
• Licenses and purchases: which licenses you own and their status. Once buying is open: the Stripe references for your purchases and subscriptions (customer, payment, subscription), so one Stripe customer holds everything you buy from Lorestar. Card details stay with Stripe; we never see them. In test mode, purchases take no card and no money, and are marked as tests.
• Early access: if you join the waitlist, your email, and your name and what you're running if you write them; which alpha key an account redeemed, and when.
• Downloads: which installer file was downloaded and when, without who.
• Security logs: sign-ins, failed sign-ins and administrative actions, with the time and, for sign-ins, the IP address, to protect the service.

The database is encrypted at rest. We don't sell personal data or use it for advertising, and the site has no analytics, trackers or third-party scripts.

The license check in the app

An installed copy of Lorestar talks to this site only about its license. Exactly what it sends, and when:

• Once, when it first needs to: it makes a random ID for this install and a signing key pair for it (the private half never leaves your computer), and registers with this site by sending the install ID, the computer's name and the install's public key, signed, with the time and a one-time random value.
• When you enter a key, and at each renewal: the license key (or alpha key), the install ID, the computer's name, the platform (Windows or Mac) and Lorestar's version. An access token this site gave the install goes with each request.
• How often: Lorestar tries to renew about 20 seconds after it starts and every 12 hours while it runs, and only reaches this site when its last renewal is more than a day old. So while you use it, about once a day; also when you press Check now or enter a key, and when you take the key off a computer.
• What comes back is a license this site signs for that install. Lorestar checks it on your computer every time it starts, with no connection, so it opens offline for up to 60 days after the last renewal.

We keep, for each install: its ID, the computer's name, platform and version, its public key, a hash of its access token, which key is on it, and when it registered, was activated and last checked in. Your account page shows these so you can see which computers use your license and free a seat. Like any server, this site sees the IP address each request comes from; for license checks it is used only in memory, to limit how fast requests can come, and isn't stored.

Nothing about your worlds, campaigns, players, notes or files is ever sent. Lorestar keeps the key on your computer, in its own settings folder (not in your data folder), because each renewal sends it again.

Cookies, and other Lorestar products

• One cookie keeps you signed in (lorestar_session), for 30 days or until you sign out. It is set for lorestar.net and its subdomains, so the same sign-in works on other Lorestar products there, such as Lorestar Maps at maps.lorestar.net when it opens. Administrators also get a short-lived admin cookie. There are no other cookies.
• What another Lorestar product learns when it asks this site who is signed in: your account ID, email, display name, whether your address is confirmed and two-step sign-in is on, and which Lorestar products you have (license, early access, subscriptions). A product's own server can also see your Stripe customer reference, so its billing uses the same customer. Nothing else goes to them.
• Signing out anywhere signs you out of every Lorestar product.

Who processes it

• Hetzner hosts the website and its database.
• Stripe handles payments once buying is open, and the billing page for your purchases and subscriptions.
• Resend sends account email: address confirmations, password resets, invites and purchase notes.

Each is a processor acting on our instructions and keeps data under its own terms.

How long we keep it

• Account, license, key and purchase records: while your account or the license exists.
• Computers: while a key is on them. A computer with no key on it that hasn't checked in for 180 days is removed. One that was cut off for abuse is kept so its ID stays blocked.
• Sign-in sessions: 30 days, or until you sign out.
• Never-confirmed waitlist entries: up to 180 days.
• Security logs: about 13 months.

Your rights

• See and export your data: your account page, Download my data.
• Correct your name on the account page; to change your email or for anything else, write to us.
• Delete your account on the account page, Delete account. A paid license keeps working but is detached from you. Cancel any subscription in billing first: Stripe keeps billing a subscription until it is canceled there.
• Free a computer's seat from your account page. Its record stays, with no key, until the 180 days above run out; write to us to have it removed sooner.
• Leave the waitlist: reply to any waitlist email, or write to us.

Questions or requests: [contact email: placeholder]. You can also reply to any email we've sent you.