What Lodge keeps.

What we keep

• Your account: email address, username, password (hashed with Argon2, never stored as typed), and the bio and profile picture you choose to add.
• Your people: friend requests, friendships, who you’ve blocked, and any reports you file.
• Your Lodges: the Rooms you make or join and what you put in them: decorations, photos, posters, sounds, memories from the photo booth, shared levels and invite links.
• Messages you send in chats and Lodges, with their reactions and read markers. Photos and voice notes you send are stored on our server too, voice notes as audio.
• Which browsers and phones are signed in to your account, so Settings can list them and sign them out. A sign-in that goes unused for 14 days expires.
• Notification addresses for the browsers and phones you turn notifications on for, so knocks and calls can reach them.
• Small counters that keep the service healthy (how many calls started today, how many notifications failed) and which days your account was active. These are not ads data and are never sold or shared.
• Call quality: when a connection in a call ends, a short summary of how it went (direct or through the relay, round-trip time, packet loss, how often video was stepped down, reconnects and dropouts) and the kind of device, tied to your account so we can find and fix bad connections. Nothing about what was said or shown.
• Crash reports: when Lodge hits an error on your device it sends us the error message and where in the code it happened, the page you were on, your kind of device and browser, and your account. These are held in the server’s memory, not saved to the database, and are gone when it restarts; only a daily count of errors is kept.
• For each day you open Lodge, a rough location (city, region and country) worked out from your internet address, and the kind of device (for example “iPhone app”), so we know where Lodge is used. The lookup happens on our own server and the internet address itself isn’t saved.

What we don’t keep

• Calls are never recorded. Video and audio go directly between the people on the call (peer to peer, encrypted by WebRTC). When a direct path isn’t possible they pass through a relay server (TURN) that forwards the encrypted stream without being able to watch or store it. The relay is our own, running alongside Lodge, not a third party’s.
• Camera effects like backgrounds and body tracking run on your own device. The camera image is not uploaded for them.
• No ads, no ad trackers, no selling or renting your data to anyone. Ever.

Who else touches it

• Apple (iPhone app) and Google (Android app) deliver notifications. They see that a notification was sent to your device and its text, like “Ada is at the door”.
• Browser push services (Apple, Google, Mozilla, Microsoft) do the same for the website.
• If you search for music or GIFs, your search text goes to YouTube or KLIPY to find results. The weather in your Lodge window uses Open-Meteo with the place name you pick.
• When a GIF or a YouTube video plays in Lodge, your device loads it straight from KLIPY or YouTube (Google), so they see your internet address and what was loaded, under their own privacy policies.
• Feedback you send with the Feedback button goes to our issue tracker (Linear) so we can fix things, along with your username, your email address and the page you were on.

Your controls

• Download everything Lodge has about you from Settings, any time.
• Delete your account from Settings. It removes your account, your messages and any Lodge nobody else is in (a shared Lodge passes to another member), and it cannot be undone.
• Turn notifications off per device in Settings, or in your phone’s settings.
• Block or report anyone from their profile. Blocked people can’t call, knock, message or find you.

How long we keep it

• Everything above stays until you delete it or delete your account, except where this page says otherwise (crash reports and unused sign-ins).
• A guest pass from an invite link is deleted, with everything in it, once its sign-in ends.
• Daily totals that aren’t tied to anyone (how many calls started on a day) are kept.

Kids

• Lodge isn’t meant for children under 13, and we don’t knowingly keep accounts for them. If you think one exists, tell us and we’ll remove it.

Questions

Email officialnerdlabs@gmail.com, or use the Feedback button inside Lodge, and it comes straight to us. You don’t need an account to email. If this policy changes in a way that matters, we’ll say so in the app before it takes effect.

To delete your account, including if you can’t sign in, see Delete your account.