Privacy Policy

Effective 2026-04-11. Applies to Wyrdlyre (pre-alpha).

Wyrdlyre is a local-first voice-driven Dungeon Master application published by Sand Point Studios LLC. We wrote this privacy policy to be accurate rather than legally exhaustive — if anything below surprises you, that's a defect, please tell us.

TL;DR

Wyrdlyre runs entirely on your own machine. Your campaign data, your API keys, and your voice never touch our servers. We literally do not have a server that receives your gameplay.

What lives where

API keys (Anthropic, OpenAI, ElevenLabs, Ollama). Stored in your operating system's native keychain (Windows Credential Manager, macOS Keychain, Linux Secret Service). Accessed by the local Wyrdlyre backend process and nothing else.

Campaign and session data. Stored in a local SQLite database on the host machine. Not synced or uploaded anywhere by default. If a future version adds optional cloud sync, it will be opt-in with clear disclosure.

Voice audio. Captured by the player's device, transmitted over the local network (or Tailscale) to the host machine, transcribed, and discarded. Raw audio is not persisted unless the host explicitly enables session recording.

Chat log / transcripts. Stored in the local SQLite database as part of the campaign history. Players and the host can delete campaigns at any time, which removes all associated messages and rolls.

Third parties you invoke

When Wyrdlyre runs a DM turn, it calls the AI providers whose keys you've configured. Those providers (Anthropic, OpenAI, optionally ElevenLabs, optionally your self-hosted Ollama instance) receive whatever text or audio is needed for the request and return a response. They each have their own privacy practices which you should review before using their APIs with real-world data:

Anthropic privacy policy
OpenAI privacy policy
ElevenLabs privacy policy

Because you bring your own keys, your requests to these providers are billed and logged under your account, not ours. Sand Point Studios never sees them.

What we collect

At this pre-alpha stage: nothing. There is no telemetry, no crash reporter, no analytics, no phone-home license check. Wyrdlyre runs entirely offline once installed (except for the calls you make to the AI providers you configured).

If a future version adds optional crash reporting or opt-in telemetry, we'll update this policy and require your explicit consent before any data leaves your machine.

Data controller

Sand Point Studios LLC is the data controller for any Wyrdlyre data that exists on our systems. (Currently: none.) For any questions or requests, reach us at [email protected].

Your rights

Because Wyrdlyre stores your data locally, your "right to be forgotten" is satisfied by deleting the app and its local database. If we ever add a cloud component and collect data about you, your rights under GDPR, CCPA, and similar laws apply, and we'll explain the specific mechanisms for exercising them at that time.

Changes

When this policy changes, we update the "Effective" date at the top and note meaningful changes in Wyrdlyre's release notes. Continued use of the app after a policy change constitutes acceptance.