Privacy Policy

Last updated — July 26, 2026

LudoTrace ("we," "us," "LudoTrace") is operated by Timbertree Studios LLC, a limited liability company organized in Missouri, United States. This policy explains what data LudoTrace collects when you use our Client, mods, and App, how it's processed, and — because this is the part that matters most for LudoTrace specifically — what we don't keep.

The short version: LudoTrace never stores your raw gameplay trace data. A local mod writes gameplay events to a file on your machine, the Client uploads it, our server processes it into a written insight, and the raw file is discarded immediately after. Only the generated insight — not the underlying event log — is retained.

What we collect

Account information — your email address, via our authentication provider (Clerk). We don't set or store a password ourselves.
Gameplay session data — a local mod running inside your game writes a JSONL event log (session start/end, locations visited, kills, quest progress, and similar structured gameplay events — see the public mod spec for the exact schema). The Client uploads this file to our server, which processes it, generates your insight, and discards the file. We do not retain the raw event log.
Generated insights — the LLM-written summary produced from your session data is retained in your account until you delete it or your account.
Optional integrations — if you configure a Discord webhook URL in Settings, we store that URL to deliver insights there. We do not access your Discord account beyond posting to that webhook.
Billing information — if you subscribe to a paid plan, payment is handled entirely by Stripe. We never see or store your card details — only your subscription tier and status.
Basic operational logs — standard request/error logs (timestamps, endpoints, response codes) for reliability and debugging, with sensitive values (tokens, IDs) redacted before they're ever written.

How we use it

Your gameplay session data is used for exactly one purpose: generating the insight you see in the App. We do not use your data to train models, sell it, or share it with advertisers. Your email is used for authentication and any account-related communication (e.g. billing receipts, service notices).

Third parties we use

Clerk — authentication (sign-in, session management)
Stripe — subscription billing and payment processing
An LLM provider (self-hosted or Anthropic's API, depending on configuration) — processes your session data into a written insight. The provider receives the session data needed to generate that specific insight and does not retain it beyond that request.
Cloudflare — network routing and DDoS protection for our infrastructure.

We don't sell your data to anyone, for any reason.

Data retention and deletion

Raw gameplay trace data is discarded immediately after processing — it is never retained. Generated insights persist in your account until you delete them or delete your account. You can permanently delete your account and all associated data (insights, settings, billing link) from the App's account settings at any time; deletion is immediate and irreversible.

Children's privacy

LudoTrace is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we'll delete it.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page. Continued use of LudoTrace after a change means you accept the updated policy.

Contact

Questions about this policy or your data: ludotrace-support@googlegroups.com