Privacy policy
Your words, your data, your choices.
Browse published catalog entries without signing in. Supabase provides the catalog, authentication and private account records, including favorites, eligible Grimoire saves and submitted suggestions. Stripe handles web subscription payments. Device-only data stays separate, and unavailable services do not confirm a save that did not happen.
Device preferences and drafts
Recently viewed entry IDs, theme and account-navigation preferences use browser or device storage. Legacy device bookmarks stay separate from account favorites. Save Draft explicitly keeps contribution text on the device when storage is available; unsaved edits may stay in session memory. Saving a device draft does not send it for review. Search and filtering happen in the app against the loaded public catalog.
Where that data lives
On the web, local preferences and legacy device bookmarks use localStorage; mobile uses device storage. Browsers and operating systems control when that storage may be cleared. Signing in does not automatically upload legacy bookmarks, history or contribution drafts. The explicit import action copies supported device bookmarks into the private account collection without deleting the originals.
Private Grimoire
Eligible signed-in accounts save custom spell collections, personal notes and flashcard review progress in private Supabase account records. Saves are confirmed only after the service commits them; connection or access failures show their status. These records can sync across devices and remain separate from account favorites. You can export retained data as JSON, remove collections or spells, clear notes and reset progress, including after write eligibility ends. Web export uses a download; native export uses your device's share action.
Existing device preview
Older Grimoire preview data stays in the original browser profile or app installation, where people sharing that storage may access it. Signing in does not upload it. An eligible account can explicitly confirm copying it into a new, empty account Grimoire; import leaves the device original unchanged. Device storage controls can remove the original without deleting cloud records.
Optional accounts
Supabase processes sign-in credentials and stores account identity. The app stores your Supabase user ID, email, display name, optional HTTPS avatar, private account status and role, saved spell references and eligible Grimoire records in its database. Passwords are handled by Supabase Auth and are not stored in application profile records. Google sign-in can supply the name, email and profile photo you authorize. No public profile is published.
Sessions and private data
Supabase manages sign-in session tokens. Web and native session storage are separate from legacy device bookmarks; signing out clears the stored sign-in session. Account data is held in memory and private views are cleared on sign-out or account changes. Signing out does not delete your cloud account or saved collection.
Submitted suggestions
Choosing Submit sends the contribution fields, source and optional media links, notes, account reference and submission timestamps to Supabase. You can read your own submissions; the trusted Owner can review them and save a status or reviewer note. Other ordinary accounts cannot read them. Approved content becomes public only through a separate publication action. Clearing a device draft does not delete a submitted record.
Contact messages
If you submit the Contact form, your name, email address, subject and message are saved in a private Supabase table for the site owner to review. A signed-in submission can also reference your account identity. Guests can submit without an account. Contact drafts stay in memory while the page is open and are not saved to browser or device storage. The form confirms a save only after it succeeds; no automated email is sent. Never include passwords, verification codes or private credentials.
Notifications
Published announcements are public. When signed in, notification IDs and read times are saved privately with your Supabase account so read status can sync across devices. Guests keep up to 2,000 recent read IDs on the current browser or device. Guest read status is separate from account read status and is not uploaded on sign-in. Notification links open their stated destinations. Publishing an announcement does not send email or push notifications.
Optional browser speech
If you choose the computer voice reading aid, the browser or operating system's speech engine processes the selected spell text. Voice availability and processing depend on that provider; this app does not record your voice or request microphone access.
Website analytics
The web shell includes Vercel Web Analytics, subject to the hosting project's configuration. Our integration removes URL query strings and fragments, excludes authentication callback and password-reset pages, and adds no custom account identifiers, profile fields, favorite lists or contribution text. Native screens do not use this web integration.
Advertising and payments
Advertising is not active. Available web subscriptions use Stripe-hosted Checkout and Customer Portal pages, where Stripe handles payment-card entry and processing. The app stores private links between your account and Stripe customer, subscription and Checkout identifiers, along with approved offer details, billing status and confirmed access periods, rather than full card details. These billing records are separate from public profiles and plan listings. Contribution and contact forms do not request card information. Manage Billing in Profile opens the website's available billing controls; contact us with billing questions.
Links and hosting
Opening a source or Piratechs link sends you to an external website with its own privacy practices. The service hosting this website may process ordinary connection information, such as an IP address and request logs, to serve the page.
Your choices
On Saved, remove individual account favorites or confirm clearing the collection. Manage retained collections, notes and progress in My Grimoire, and export data before removing it. Device storage controls remove local preferences, legacy bookmarks, preview data and saved drafts, not cloud records. Clear a contribution draft from Contribute; view submitted records in My Submissions. Profile edits change your private display name and avatar. Manage Billing on the website can schedule cancellation at the confirmed paid period's end. Use Contact for account or submitted-data deletion requests; there is no one-click account deletion action.
Questions
For privacy questions or requests concerning a saved contact message, use the Contact form. Describe the data involved without including passwords or private credentials.