lore
legal

Privacy Policy

Last updated: April 2026

1. What we collect

We collect the email address you sign in with, the content you upload to your collection, the requests submitted to your collection (for example, redacted query samples, aggregated query themes, invoked tools, result counts, scopes granted, and timestamps of those calls), and standard server logs (IP address, user agent) used for debugging and abuse review.

We set a secure, httpOnly session cookie on findlore.dev after you sign in. The optional Findlore browser extension stores your currently selected collection in your browser's local extension storage; we don't receive that data until you choose to clip a page into a collection.

2. How we use it

We use this information to operate the service: serve your collection over MCP, send you sign-in links, surface anonymized usage and quality signals back to you, and investigate abuse. We do not sell your data and we do not use your collection content or submitted queries to train models.

3. What we share

We share data only with the infrastructure providers required to run Lore — primarily Cloudflare, which hosts the application, stores your data, and delivers magic-link sign-in emails via Cloudflare Email. We do not share data with advertisers or data brokers.

4. Public and gated collections

Content in a public collection is, by design, served to anyone who connects an MCP client. Email-gated collections restrict access to the addresses on the allowlist, but that gating relies on the connecting client honoring the auth flow — treat anything you put in a public or shared collection as readable by its audience. Collection owners can see aggregate and anonymized usage for their own collections, but Lore does not show full raw per-subscriber query history to creators by default.

5. Retention and deletion

Collection content lives until you delete the collection. Deleting a collection removes the underlying content. Server logs and request-level records are retained to operate and secure the product. Aggregate usage counters, anonymized query themes, and quality summaries are retained for the lifetime of the collection so you can see activity over time.

6. Your rights

You can export or delete your collection at any time from settings. For any data request we cannot satisfy in-product, email hello@findlore.dev.

7. Security

We use standard practices to protect your data, but Lore is a v0 open beta. Please don't store anything you couldn't survive being exposed.

8. Changes

This policy may change. Continued use of the service after a change means you accept the updated policy.

9. Contact

Questions: hello@findlore.dev. Abuse: abuse@findlore.dev.