Privacy Policy
Last updated: March 14, 2026
1. Introduction
Lorelins ("we", "our", "us") operates a D&D campaign management bot on WhatsApp. This Privacy Policy explains how we collect, use, and protect your information when you interact with our service.
By using Lorelins, you agree to the collection and use of information as described in this policy.
2. Information We Collect
Information you provide
- WhatsApp phone number (required to communicate with the bot)
- Character names, stats, and other campaign data you create
- Campaign names and session scheduling details
- Messages sent directly to the Lorelins bot
Information collected automatically
- Timestamps of interactions with the bot
- Dice roll history and command usage patterns
- Basic analytics on our website (privacy-first, cookie-free analytics via Plausible or Umami)
Information we do not collect
- Messages between players that are not directed at the bot
- Contacts, photos, or media from your device
- Location data
- Payment information (the service is free during beta)
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Lorelins bot service
- Store your campaign data so it persists between sessions
- Send session reminders and campaign notifications you have opted into
- Understand usage patterns to improve the product
- Respond to support requests
We do not sell your personal information to third parties. We do not use your data for advertising.
4. Data Storage and Security
Your data is stored on secure servers within the European Union. We use encryption in transit and at rest to protect your information. Access to user data is restricted to authorized personnel only.
While we take reasonable measures to protect your data, no method of electronic storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your campaign data for as long as your account is active. If you stop using Lorelins, your data will be automatically deleted after 12 months of inactivity. You can request deletion of your data at any time by contacting us.
6. Third-Party Services
Lorelins uses the following third-party services:
- WhatsApp Business API (by Meta) to deliver the bot experience. Your interactions are subject to WhatsApp's Privacy Policy.
- Cloudflare for website hosting and content delivery.
- Privacy-first analytics (Plausible or Umami) on our website. These tools do not use cookies and do not track individual users.
7. Your Rights
Under applicable data protection laws (including GDPR), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Request a portable copy of your data
- Withdraw consent at any time
To exercise any of these rights, contact us at the email address listed below.
8. Children's Privacy
Lorelins is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via the bot or on our website. Your continued use of Lorelins after changes are posted constitutes acceptance of the updated policy.
10. Contact
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at: