Privacy policy

Last updated 6 September 2026

Lore keeps a record of what you read on the web, so you can find it again. It is operated by ArtMill LLC. Your library is yours: it is not sold, not shared with other people using Lore, and not used to train anything.

This policy covers the Lore apps, the browser extensions, and the service at internetlore.app.

Your account

You sign in with an email address, a Google account, or an Apple ID. Lore stores the address the provider gives it, your name and picture if they are offered, and an identifier from the provider that says the person signing in this time is the same one as last time. Lore never receives or stores your password for any of these.

If you use Sign in with Apple and choose to hide your address, Lore only ever sees Apple's relay address, which is all it needs.

What Lore records

What is yours alone, and what is shared

Everything above belongs to your account and is visible only to you. Every request Lore serves is filtered to the account that made it, and the database enforces the same rule underneath.

One thing is deliberately shared, and it is not about you. When Lore looks up a public web page to find its title, description, favicon and preview image, it keeps that in a cache keyed to the page's address rather than to any account, so the next person to save the same page does not cost the site another fetch. That cache holds facts about public pages only. It records nothing about who visited them, when, or how many people did.

Google user data

If you connect a YouTube account, Lore requests the read-only scope https://www.googleapis.com/auth/youtube.readonly and uses it to read:

How it is used. Only to show it back to you inside your own library. It is not analysed, profiled, advertised against, or used to train any model.

How it is stored. In Lore's own PostgreSQL database, filed under your account. Access tokens are stored there too, so the connection can refresh itself, and are erased when you disconnect.

How it is shared. It is not. No third party receives it.

Signing in with Google is separate and asks only for your name, email address and profile picture. Lore's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Lore never records

Who else touches your data

Lore runs on Railway, which hosts the servers and the database. Sign-in codes are delivered by a transactional email provider. Neither is permitted to use your data for anything other than running the service on ArtMill's behalf. Lore has no advertising partners, no analytics vendors, and no data brokers.

Lore will disclose your data if legally compelled to. Should that ever happen, and unless a court forbids it, you will be told.

Removing your data

The shared page-metadata cache survives, because it describes public web pages and contains nothing that identifies you.

Children

Lore is not intended for anyone under 13, and accounts are not knowingly created for them.

Changes, and how to reach us

If this policy changes in a way that affects what is collected or who sees it, the date at the top changes and account holders are told by email before it takes effect.

Questions, requests, or a demand that your data be deleted: lore@artmill.dev.