Privacy
Last updated: 16 October 2026
Contents
- 1. Who we are and what this policy covers
- 2. The short version
- 3. Data we collect, why, and the legal basis
- 4. Claude connector, analytics and storage on your device
- 5. Who receives data, and transfers outside the EU
- 6. Security
- 7. How long we keep data
- 8. Your rights
- 9. Children, changes and contact
1. Who we are and what this policy covers
Ittrium Lore is a personal tool for organising the setup of a fiction book. It has no AI inside. It can be used in a browser at lore.ittrium.co, and it offers a connector so that you can use your books from Claude.
The controller under Art. 4(7) GDPR is:
Inga Teiserskyte, Grunow Str. 21, 13187 Berlin, Germany. Email: support@ittrium.co
This policy covers lore.ittrium.co, ittrium.co and the Claude connector at mcp.ittrium.co. It does not cover other websites that we link to, or Claude itself. We have not appointed a data protection officer, because the legal conditions for it (§ 38 BDSG) are not met.
Our legal notice (Impressum) is at ittrium.co/legal.
2. The short version
| If you… | We handle | Where |
|---|---|---|
| Use the app without signing in | Nothing. Your books stay in your browser | Your device |
| Sign in with Google or GitHub | Your email, name, a user ID, session data | WorkOS, Google, GitHub |
| Keep a book in the cloud | Your books with all their data points | Cloudflare database in the EU |
| Connect Claude | The book files Claude reads or saves for you | Anthropic, under its own terms |
| Click Accept on analytics | A random ID, a session ID, a window ID, usage events, your IP address (not stored), browser type and version, operating system and version, device type, screen and window size, your browser language, your time zone and the host name lore.ittrium.co | PostHog, EU region |
| Click Reject, or never answer | Nothing is sent to the analytics tool | None |
We do not sell data and we do not show advertising.
3. Data we collect, why, and the legal basis
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Email address, name, Google or GitHub account ID, user ID | You, through Google or GitHub sign-in | Create and run your account, keep you signed in | Art. 6(1)(b) GDPR, contract (providing the service) |
| Session data: session ID, sign-in time, tokens | WorkOS, our Worker | Keep you signed in, secure the account | Art. 6(1)(b) and (f) GDPR |
| Books with their data points, kept in the cloud | You, or Claude on your behalf | Store and give back your books | Art. 6(1)(b) GDPR |
| Technical request data, such as your IP address, which Cloudflare processes as our hosting provider | Your browser, Cloudflare | Deliver the app, prevent abuse, find errors | Art. 6(1)(f) GDPR, legitimate interest in a secure and working service |
| Usage events, random ID, session ID | Your browser, only after Accept | Understand which parts of the app are used | Art. 6(1)(a) GDPR, consent, and § 25(1) TDDDG |
| Emails you send to support@ittrium.co | You | Answer you | Art. 6(1)(b) or (f) GDPR |
Books you keep only in your browser are not sent to us. Data you enter before you create an account stays only on your device until you create an account. When you sign in, your books are uploaded to your cloud storage. This happens automatically. After that, your books are kept in sync with the cloud. If your device holds books from another account, the app asks before it uploads them. If you say No, they stay on your device only. Our own database stores only your user ID, your books and the deletion markers described in section 7. Your name and email address stay with the sign-in providers (WorkOS, and Google or GitHub). You do not have to give us any of this data, but without an account the cloud storage and the Claude connector do not work.
Google user data. If you sign in with Google, we ask Google for your basic profile only: your email address, your name, your profile picture and your Google account ID (the permissions openid, email and profile). We do not ask for access to your Gmail, Drive, contacts, calendar or any other Google service. We use this data only to create your account and to sign you in. We do not store it in our own database. It is processed on our behalf by WorkOS, our sign-in provider, and WorkOS keeps it for your account until you delete the account. We do not sell this data, we do not use it for advertising, and we do not use it to train AI models. We do not share it with anyone except WorkOS.
GitHub user data. If you sign in with GitHub, we ask GitHub for your basic profile only: your email address, your name, your profile picture and your GitHub account ID. We do not ask for access to your repositories or any other GitHub service. We use this data only to create your account and to sign you in. We do not store it in our own database. It is processed on our behalf by WorkOS, our sign-in provider, and WorkOS keeps it for your account until you delete the account. We do not sell this data, we do not use it for advertising, and we do not use it to train AI models. We do not share it with anyone except WorkOS.
We do not ask for special categories of data (Art. 9 GDPR). Your book content is your own text. Please do not put health data or similar sensitive data of real people into it.
We do not use automated decision-making or profiling that has legal or similarly significant effects on you (Art. 22 GDPR).
4. Claude connector, analytics and storage on your device
Claude connector. If you connect Claude to Ittrium Lore, you sign in with your account and approve the connection. Claude can then list your cloud books, read their files and save the decisions file of a book. It cannot see books that you keep only in your browser.
- What Claude reads or saves goes to and from Anthropic. From there, Anthropic’s own terms and privacy policy apply, not this policy.
- The connector uses short-lived access tokens (5 minutes). Our servers do not store your Claude conversations.
- The connector’s own code writes no log lines, so your prompts, file contents and decisions text are not logged by us. Cloudflare, as our hosting provider, processes technical request data such as the IP address to deliver the service. Cloudflare keeps error reports for requests that fail, for a short time.
- You can disconnect at any time in Claude. Disconnecting does not delete your books. To delete them, see section 7.
Some content in your book files is sealed: the app does not show it on screen, so that you are not spoiled. The connector gives Claude all files in full, including the sealed parts, so this content also goes to Anthropic. The files are plain text files made from your data points, with no AI involved. When you use Export in the app, they are made in your browser, on your device. When Claude reads a book through the connector, our server at Cloudflare makes them at that moment. The exported files are not stored in the cloud. Only your book data is kept in your account’s cloud storage, a Cloudflare database in the EU. You can export the files and read them yourself. The Export pack needs an account. Single section downloads and the backup file work without one.
Analytics. The app asks once whether you accept product analytics. Before you click Accept, and after you click Reject, the analytics tool is not loaded and nothing is sent. You can switch it off again in the app under Privacy. After Accept, the app sends the following to PostHog, in its EU region:
- a random ID that is stored on your device,
- a session ID, a window ID, your browser’s time zone and the host name lore.ittrium.co,
- usage events of the app: a book is created (and how: empty, from a world, as a sequel or as the demo), the demo book is loaded, files are exported (only the number of files), a backup is imported, you click Accept, a book is deleted (never its name), and you finish signing in. Nothing else is sent: no page views, no automatic click tracking, no session recording and no person profiles,
- your IP address with each request. We have set PostHog not to store IP addresses. We also tell PostHog not to guess a location from the IP address, so no city, postcode or coordinates are stored.
Session recording is off. We use this data to see which parts of the app are used.
Storage on your device. Section 25 of the German TDDDG requires consent for storing or reading information on your device, unless it is strictly necessary for a service that you asked for. The app stores your books, your settings and your sign-in session in your browser. This is necessary to run the app. The analytics ID is stored only after Accept. The app uses no advertising cookies and no third-party tracking.
5. Who receives data, and transfers outside the EU
We use service providers who process data on our behalf under a data processing agreement (Art. 28 GDPR):
| Provider | Task | Data | Location |
|---|---|---|---|
| Cloudflare | Hosting, API, database, email forwarding for support@ittrium.co | Request data such as IP address; book data of signed-in users | Database in the EU (jurisdiction EU); other services worldwide |
| WorkOS | Sign-in and sessions | Email, name, profile picture, user ID, session data | United States, under standard contractual clauses |
| Google sign-in, and the mailbox that receives support@ittrium.co | Sign-in with your Google account; emails you send to support@ittrium.co | Google’s own privacy policy applies | |
| GitHub | GitHub sign-in | Sign-in with your GitHub account | GitHub’s own privacy policy applies |
| PostHog | Analytics, only after Accept | See section 4 | EU region |
| Anthropic | Only when you connect Claude | What Claude reads or saves | Anthropic’s own terms apply |
We do not pass your data to anyone else, except where the law requires it. Some providers, such as WorkOS, Google, GitHub and Anthropic, may process data outside the EU or EEA, for example in the USA. This is only done with an adequacy decision, such as the EU-US Data Privacy Framework, or with standard contractual clauses (Art. 44 ff. GDPR). WorkOS and Cloudflare use standard contractual clauses in their data processing addenda. Google and GitHub are certified under the EU-US Data Privacy Framework. For Anthropic, the transfer happens when you use Claude with the connector, and Anthropic’s own terms and privacy policy apply.
6. Security
Data is sent encrypted (HTTPS). The sign-in uses Google or GitHub, and WorkOS, so we never see or store a password. Access tokens are short-lived. The refresh token is kept only in a cookie that the page’s own code cannot read (HttpOnly, Secure, SameSite=Strict), for at most 15 days. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the authority as the law requires.
We do not read your books as part of running the service. There is no admin tool that shows book text. The operator can technically query the database, and does so only to handle a legal report, an order from a court or an authority, or a fault you ask us to look into.
7. How long we keep data
| Data | Kept |
|---|---|
| Account and cloud books | Until you ask us to delete them, or delete them yourself |
| Sign-in session | At most 15 days, or 2 days without use |
| Analytics data (PostHog) | Up to 1 year (PostHog’s free plan; PostHog does not allow a shorter period). |
| Emails to support@ittrium.co | 12 months after we answered |
| Technical request data | Our Worker writes no request log of its own. Cloudflare keeps error reports for requests that fail, for a short time. |
You can delete your account in the app. This removes your cloud books, the markers described below, your sign-in account at WorkOS, and the copies of your synced books on your device. A book that was never uploaded stays on your device. You can also write to support@ittrium.co from the email address of your account. If you write to us, we aim to delete within 7 days. When a book is deleted, we keep a small marker for up to 180 days: the book ID, your user ID and the time. It holds no book content. We keep it so that a deletion also reaches a device that was offline, and the deleted book does not come back. After 180 days the marker is removed, and it is removed earlier if you delete your account. Cloudflare keeps backups of the database for 7 days. A deletion request means that we start deleting now, not that every backup disappears at once.
8. Your rights
Under the GDPR you have the right to:
- access your data (Art. 15),
- correct it (Art. 16),
- have it deleted (Art. 17),
- restrict its use (Art. 18),
- receive it in a common format (Art. 20),
- object to processing based on legitimate interest (Art. 21),
- withdraw consent at any time, with effect for the future (Art. 7(3)). Analytics can be switched off in the app under Privacy.
Write to support@ittrium.co to use these rights. We may ask you to confirm that you own the account. You can also complain to a data protection authority. In particular, you can complain to the authority in the EU country where you live or work, or where you think a violation took place (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin, www.datenschutz-berlin.de.
9. Children, changes and contact
The app is not for anyone under 16. If we learn that an account belongs to a child under 16, we delete it.
We change this policy when the app or the law changes. The date at the top shows the latest version. We will tell signed-in users about important changes in the app.
Questions about privacy: support@ittrium.co.