PLAIN-LANGUAGE PRIVACY

YOUR DATA.
YOUR BUSINESS.

Last updated: August 15, 2026. Lore reads connected-service data only when you ask it to generate a report.

What we retrieve

After Steam verifies your identity, we request your SteamID, public profile summary, visible owned games, playtime, recently played games, and achievement progress for up to eight of your most-played games. If your Game details are private, Steam does not return your library and we cannot analyze it.

Todoist OAuth

Todoist Lore asks Todoist for read-only access to your profile name and timezone, active tasks, projects, up to three months of completed-task detail, and Todoist productivity statistics. After authorization, the short-lived access token is encrypted into an HTTP-only cookie in your browser. Lore discards refresh tokens and never exposes access tokens to browser JavaScript.

What this release stores

This release has no user database. It stores only your SteamID in a signed, HTTP-only browser cookie for up to seven days and an encrypted Todoist access token in an HTTP-only browser cookie for at most one hour. Steam and Todoist responses and generated reports use no-store requests and are not intentionally persisted on the server. Normal infrastructure security logs may temporarily contain request metadata, but never API tokens or passwords.

Where data is processed

The application is designed to be hosted and process requests in the United States. Steam separately processes data under Valve's own terms and privacy policy.

Delete or disconnect

Choose Disconnect on a report to delete that integration's browser cookie immediately. Because this release has no user database or saved profiles, there is no stored report record to delete.

What we never receive

We never receive or store your Steam password, payment information, friends list, or chat history. The Todoist token remains in server configuration and is never included in a report response or client bundle.

Sharing

Your report is private by default. A share card is generated only when you request it. The card contains the archetype and aggregate statistics shown in its preview; it does not publish a permanent public profile.

Steam disclaimer

Steam data is provided “as is.” Lore is independently operated and is not affiliated with or endorsed by Valve Corporation. Steam and the Steam logo are trademarks of Valve Corporation. Steam data is accessed only through Steam OpenID and documented official Steam Web APIs.

Todoist disclaimer

Todoist data is provided “as is.” Lore is not affiliated with or endorsed by Doist. Todoist data is accessed only through the current documented Todoist API.

Contact

Before deployment, replace this section with the operator's support and privacy email address.