Who we are
Loomweaver is a product of Quinci Games, operated by an individual sole proprietor based in New Mexico, United States. For privacy questions or to exercise any of the rights described below, contact us at [email protected].
In this policy, “we” and “us” refer to Quinci Games. “The marketing site” refers to loomweaver.app. “The app” refers to the Loomweaver application served at app.loomweaver.app.
What we collect
On the marketing site
This site is a static marketing page. It does not require an account, set tracking cookies, or store information about you in our database. The only data collected directly through this site is:
- Waitlist signups — If you choose to give us your email address through the waitlist form, we store it for the sole purpose of notifying you when Loomweaver opens to the public. The form is hosted by Tally (see Third-party services).
- Server-level access logs — Our hosting provider, Cloudflare, records standard web-server information (IP address, request URL, user agent, timestamp) for security and abuse prevention. We do not have direct access to these logs; they are retained per Cloudflare’s policy.
- Anonymous analytics — We use Cloudflare Web Analytics, which counts page views and basic usage patterns without setting cookies and without collecting personally identifying information.
In the Loomweaver app
When you create a Loomweaver account, we collect:
- Account profile — Your email address, display name, and profile photo as provided by your sign-in method (e.g. Google). Authentication is handled by Firebase Authentication (see Third-party services).
- The content you create — Campaign data, NPCs, locations, items, sessions, notes, uploaded images, and audio recordings you choose to store. This is your content; we hold it on your behalf so you can use the app.
- Payment information — If you subscribe to a paid plan, billing details are collected and processed by our payment processor (see Third-party services). We never see or store your full payment card number.
- AI prompts and responses — When you use AI-powered features (the Oracle, AI Suggest, AI image generation, etc.), the text or images you submit are sent to Google AI Studio (Gemini) to generate a response. Per Google’s terms for paid API use, this content is not used to train Google’s models.
- Operational logs — Standard application logs for debugging, security, and performance monitoring. These may contain timestamps, account identifiers, and request metadata.
Third-party services we use
The services below process data on our behalf. We choose them because they offer strong privacy protections and operate under their own published privacy policies.
| Service | Purpose | Privacy policy |
|---|---|---|
| Cloudflare | Hosting, content delivery, network security, anonymous analytics | cloudflare.com/privacypolicy |
| Firebase (Google) | Account authentication for the Loomweaver app | firebase.google.com/support/privacy |
| Google AI Studio (Gemini) | Powers AI features (the Oracle, AI Suggest, AI image generation, transcription summaries) | policies.google.com/privacy |
| Polar | Subscription billing and payment processing | polar.sh/legal/privacy |
| Tally | Hosts the waitlist signup form on the marketing site | tally.so/help/privacy-policy |
We do not sell or rent your personal data to anyone, ever.
How we use your data
We use the data we collect to:
- Operate the app and the marketing site
- Authenticate you and keep your account secure
- Process subscription payments
- Provide the AI features you explicitly request
- Send you essential service notifications (e.g. account verification, billing receipts, security alerts)
- Notify you of public launch if you joined the waitlist
- Diagnose bugs and improve reliability
- Comply with legal obligations
We do not send marketing emails outside the waitlist launch notification you signed up for.
Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and all associated personal data
- Export a copy of your data in a portable format
- Object to or restrict certain processing
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with your local data protection authority
If you are in the European Economic Area, the United Kingdom, or California, these rights are guaranteed by the GDPR, UK GDPR, and CCPA / CPRA respectively. They are available to all Loomweaver users regardless of where you live.
To exercise any of these rights, email [email protected] with your request. We will respond within 30 days.
Deleting your account
You can delete your Loomweaver account and all the data associated with it from within the app’s account settings, or by emailing [email protected]. When you delete your account, your campaign data, NPCs, locations, sessions, uploaded media, and AI conversation history are permanently removed within 30 days. Backups may retain copies for up to 90 days for disaster-recovery purposes, after which they are also overwritten.
If you joined the waitlist but never created an account, you can have your email removed by emailing [email protected].
Data retention
- Account and content data — Retained for as long as your account is active. Deleted within 30 days of account deletion (with up to 90 days in backups).
- Waitlist email — Retained until you ask us to remove it, or until 12 months after public launch, whichever comes first.
- Server access logs — Retained per Cloudflare’s standard policy (typically a few days for security purposes).
- AI prompt history — Stored alongside your other content; deleted with your account.
International data transfers
Loomweaver is operated from the United States, and our service providers may store or process data in the United States or other countries. When personal data of EU/UK users is transferred outside the EU/UK, we rely on Standard Contractual Clauses or equivalent safeguards offered by our service providers.
Cookies
The marketing site itself does not set tracking cookies. Cloudflare may set strictly necessary cookies for security and bot detection. The Loomweaver app uses cookies that are strictly necessary for authentication and session management.
Children
Loomweaver is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If we become aware that we have, we will delete it. If you believe a child has provided us with personal data, please contact [email protected].
Changes to this policy
We will update this policy when we change how we handle data. The “Last updated” date at the top of this page reflects the most recent revision. Substantive changes will be announced through the app or via email to affected users before they take effect.
Contact
Email [email protected] for any privacy question, request, or concern.