Privacy Policy

What Loomweaver collects, why, who it's shared with, and how to delete it.

Last updated: May 23, 2026

Who we are

Loomweaver is a product of Quinci Games, operated by an individual sole proprietor based in New Mexico, United States. For privacy questions or to exercise any of the rights described below, contact us at support@loomweaver.app.

In this policy, “we” and “us” refer to Quinci Games. “The marketing site” refers to loomweaver.app. “The app” refers to the Loomweaver application served at app.loomweaver.app.

What we collect

On the marketing site

This site is a static marketing page. It does not require an account, set tracking cookies, or store information about you in our database. The only data collected directly through this site is:

  • Waitlist signups — If you choose to give us your email address through the waitlist form, we store it for the sole purpose of notifying you when Loomweaver opens to the public. The form is hosted by Tally (see Third-party services).
  • Server-level access logs — Our hosting provider, Cloudflare, records standard web-server information (IP address, request URL, user agent, timestamp) for security and abuse prevention. We do not have direct access to these logs; they are retained per Cloudflare’s policy.
  • Anonymous analytics — We use Cloudflare Web Analytics, which counts page views and basic usage patterns without setting cookies and without collecting personally identifying information.

In the Loomweaver app

When you create a Loomweaver account, we collect:

  • Account profile — Your email address, display name, and profile photo as provided by your sign-in method (e.g. Google). Authentication is handled by Firebase Authentication (see Third-party services).
  • The content you create — Campaign data, NPCs, locations, items, sessions, notes, uploaded images, and audio recordings you choose to store. This is your content; we hold it on your behalf so you can use the app.
  • Payment information — If you subscribe to a paid plan, billing details are collected and processed by our payment processor (see Third-party services). We never see or store your full payment card number.
  • AI prompts and responses — When you use AI-powered features (the Oracle, AI Suggest, AI image generation, etc.), the text or images you submit are sent to Google AI Studio (Gemini) to generate a response. Per Google’s terms for paid API use, this content is not used to train Google’s models.
  • Operational logs — Standard application logs for debugging, security, and performance monitoring. These may contain timestamps, account identifiers, and request metadata.

Third-party services we use

The services below process data on our behalf. We choose them because they offer strong privacy protections and operate under their own published privacy policies.

ServicePurposePrivacy policy
CloudflareHosting, content delivery, network security, anonymous analyticscloudflare.com/privacypolicy
Firebase (Google)Account authentication for the Loomweaver appfirebase.google.com/support/privacy
Google AI Studio (Gemini)Powers AI features (the Oracle, AI Suggest, AI image generation, transcription summaries)policies.google.com/privacy
PolarSubscription billing and payment processingpolar.sh/legal/privacy
TallyHosts the waitlist signup form on the marketing sitetally.so/help/privacy-policy

We do not sell or rent your personal data to anyone, ever.

How we use your data

We use the data we collect to:

  • Operate the app and the marketing site
  • Authenticate you and keep your account secure
  • Process subscription payments
  • Provide the AI features you explicitly request
  • Send you essential service notifications (e.g. account verification, billing receipts, security alerts)
  • Notify you of public launch if you joined the waitlist
  • Diagnose bugs and improve reliability
  • Comply with legal obligations

We do not send marketing emails outside the waitlist launch notification you signed up for.

Your rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your account and all associated personal data
  • Export a copy of your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your local data protection authority

If you are in the European Economic Area, the United Kingdom, or California, these rights are guaranteed by the GDPR, UK GDPR, and CCPA / CPRA respectively. They are available to all Loomweaver users regardless of where you live.

To exercise any of these rights, email support@loomweaver.app with your request. We will respond within 30 days.

Deleting your account

You can delete your Loomweaver account and all the data associated with it from within the app’s account settings, or by emailing support@loomweaver.app. When you delete your account, your campaign data, NPCs, locations, sessions, uploaded media, and AI conversation history are permanently removed within 30 days. Backups may retain copies for up to 90 days for disaster-recovery purposes, after which they are also overwritten.

If you joined the waitlist but never created an account, you can have your email removed by emailing support@loomweaver.app.

Data retention

  • Account and content data — Retained for as long as your account is active. Deleted within 30 days of account deletion (with up to 90 days in backups).
  • Waitlist email — Retained until you ask us to remove it, or until 12 months after public launch, whichever comes first.
  • Server access logs — Retained per Cloudflare’s standard policy (typically a few days for security purposes).
  • AI prompt history — Stored alongside your other content; deleted with your account.

International data transfers

Loomweaver is operated from the United States, and our service providers may store or process data in the United States or other countries. When personal data of EU/UK users is transferred outside the EU/UK, we rely on Standard Contractual Clauses or equivalent safeguards offered by our service providers.

Cookies

The marketing site itself does not set tracking cookies. Cloudflare may set strictly necessary cookies for security and bot detection. The Loomweaver app uses cookies that are strictly necessary for authentication and session management.

Children

Loomweaver is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If we become aware that we have, we will delete it. If you believe a child has provided us with personal data, please contact support@loomweaver.app.

Changes to this policy

We will update this policy when we change how we handle data. The “Last updated” date at the top of this page reflects the most recent revision. Substantive changes will be announced through the app or via email to affected users before they take effect.

Contact

Email support@loomweaver.app for any privacy question, request, or concern.