Privacy
Last updated 16 October 2026
The short version
Scrying Orb is an invite-only app for playing a tabletop roleplaying game with your group. We keep your name, your email address and what you make and write at your table, and use them to run the game. Some features send what you write about your character to AI models in the United States, never with your name or email address. We don't sell your information.
Who we are
Scrying Orb is run by Civic Forum (ABN 56 268 642 533). For anything about your privacy, including a copy of your information, a correction, a complaint or deleting your account, email admin@civicforum.com.au.
What we keep
- Your name, your email address, who invited you, and the label they gave the invitation (which may be your real name).
- Your characters and everything you write for them, and your whole conversations with the orb.
- Your place at your tables: your role, your answers to sessions, the days you're free, your DM's messages and when you read them, and a record of play.
- Your orb's look, and a tally of your use of the AI features.
- For each sign-in, a name made from the phone's model or the browser and operating system (for example "iPhone 16 Pro" or "Chrome on Windows"), and when it was last used.
- If you turn on notifications in the phone app, the address Apple gives your phone for them, and when the app last sent it. Signing out deletes it.
- If you join the waitlist on our front page: the email address you give, your name and note if you add them, whether you're a DM or a player, and the site or link that sent you. We use it to choose whom to invite, and send it nothing but that invitation.
- When something fails on our server or in the desk app, a record of the error: what failed and where in our code, the page or screen it happened on, the app's version, and the browser or phone software that asked. The description of what failed can quote something you entered, such as a name. We use it to fix the fault.
There are no passwords. Our database stores sign-in links, phrases, invitations and device keys only as one-way hashes.
Who else at Scrying Orb sees it
Your table sees your name, your finished characters and your session answers. Your DM also sees your sheets and writing, the days you're free, and when you've read their messages. When seating people, a DM who shares a table with you can find you by the start of your name, and a DM of any table can find you by your exact email address; either way they see your name. The people who run Scrying Orb can find any member.
Who else receives it
| Provider | Where | What they receive |
|---|---|---|
| Fly.io | Servers in Sydney; a US company | Hosts our servers, database, images and logs. |
| Resend | United States | Your name, email address, and the sign-in link and phrase we email you. It's the only email we send. |
| OpenRouter | United States | What the AI features send (below), passed to models made by OpenAI, Google and Anthropic and run by them or by cloud hosts such as Microsoft and Amazon. |
| Apple | United States | If you turn on notifications: each one's words (your table's name, who did what and, for a session, its day and title, but never what a message, a document or a story thread says) and the address of the phone it goes to. |
What the AI sees
When you create a character or think through their story with the orb, it receives what you've written for that character, its name and sheet, and the table documents you can read. Portraits are drawn from the character's sheet and looks. When your DM drafts a story beat for your character, it also receives their notes about them. When your DM writes an adventure with the orb, it receives the adventure, the table's primer, your character's name, class and level, and the threads you've kept for the table or for your DM. When someone writes what a spell does with the orb, it receives that spell's or feature's own text. It never receives your account name or email address, but it does receive whatever you type, so keep real people's details out of your character's story.
On your device
The phone keeps your sign-in key, your orb's look and your light or dark choice in its keychain, and may cache images it has shown you. The desk keeps its key in your Mac's keychain, or in the browser's storage, along with your name, email address and how you've arranged it. The website uses one cookie to keep you signed in and one for light or dark. Signing out removes the key.
How long we keep it
Until you delete your account, including after your access ends. Sign-in links and phrases stop working after 15 minutes, and within the hour after that we erase them and the address they were sent to. A record of an error is deleted 30 days after the error last happened. Nothing else is yet deleted on a schedule. You can delete your account in the phone app's Settings, or email us and we will. That ends your access and deletes everything under "What we keep", except what belongs to your tables, which stays with them under the name "Former member": the record of play, including story threads noted in it, the messages your DM sent, and anything you wrote for a whole table. Backups of our servers are kept for 14 days, so a deletion reaches them within 14 days; logs and emails already sent expire on their own schedules. A waitlist entry belongs to no account, so deleting an account doesn't touch it; it stays until you ask us to remove it, by emailing the address above.
Security
Everything is encrypted in transit (HTTPS), and the website's sign-in cookie is encrypted on your device too. Invitation and sign-in codes are kept out of our server logs.
Age
Scrying Orb is for people aged 18 and over.
Your rights
You can change your name in Settings, and delete your account in the phone app's Settings. For anything else, email us; there's no export tool yet, so a copy is put together by hand. If you're unhappy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. This page changes whenever what we keep or who receives it does, and the date at the top says when.