Privacy policy

This explains what Umbra stores about you and who can see it.

What we store

Your account: username, email address, a hashed (not readable) password, your profile picture, and two-step login settings if you turn them on.
What you create: chats, notes, Codex entries, vault assets and trivia answers.
Sign-ins: the time, device/browser name and IP address of each sign-in, and when a signed-in session starts coming from a new address.
AI provider keys you add, so the server can make requests for you. They're never shown back on any page.

Your chats and private notes are yours. Things you share - Codex entries, vault assets, shared notes, leaderboard points - are visible to the team.
The owner and admins can see member details in the admin panel (email, last seen, sign-in history). IP addresses and locations stay hidden until an admin chooses to reveal them, and every reveal is logged.
The owner runs the server, so they can technically access everything stored on it.

Messages you send to the AI go to the AI provider of the connection you use (for example Anthropic or OpenRouter), under their own privacy policy.
When an admin reveals sign-in locations, the IP addresses are looked up with ipwho.is to get an approximate city and country.
Nothing is sold or shared for advertising.