Who can see what
Lore shows each person only what they need: players see their own character, the notes their Owner shares, and the map their character is on. But for now, most of that is hidden in the app rather than protected.
Everyone in a campaign is sent the whole campaign, and Lore hides parts of it on screen. Someone who inspects Lore’s data in their browser could read things they aren’t shown. Until that’s fixed, only invite people you trust, and don’t put anything in Lore you’d mind the rest of your group reading.
Hidden, but not protected yet
Players don’t see these in Lore, but they’re still sent to their devices:
- the Owner’s notes that haven’t been shared, and templates;
- a character’s private note;
- NPCs and maps a player’s character isn’t on;
- every player’s journal, which is also sent to the Owner and the other players.
In the same way, Lore’s controls stop players from changing things like their Stats, their health, or other players’ characters, but it doesn’t yet check those changes on its servers.
Protected
These never reach people who shouldn’t see them:
- Email addresses. You see your own. The Owner sees their players’ emails.
- The log. Each person is sent only the log entries they can see. When an NPC acts somewhere no player’s character is, only the Owner is sent that entry.
- Removed players. When the Owner removes a player, they lose access to the campaign and can’t rejoin with the code.