We Do Not Collect Your Information
Hollow Glyph Studios does not collect, store, or transmit any personal information. No account registration is required for any Grimoire product. No user-created content, credentials, or personal data is ever sent to or stored on our servers.
The Grimoire (Mobile) stores character cards, avatars, and preferences in the app's private on-device storage.
API Keys
The Grimoire (Desktop) and The Grimoire (Mobile) allow you to enter API keys to connect to third-party AI services of your choice. These API keys are:
- Used only to make requests directly from your device to the third-party service
- Never transmitted to or stored on Hollow Glyph Studios servers
- Stored on your own device — browser local storage for desktop; the iOS Keychain and Android Keystore for mobile (via the device's secure enclave)
We have no access to your API keys at any time.
The Grimoire (Mobile) also stores a small set of non-personal preferences on your device: a one-time migration flag, the OpenRouter model identifier you selected, and an onboarding-completion flag. None of these contain personal information.
Third-Party Services
The Grimoire applications allow you to optionally connect to third-party services. All connections are made directly from your device. We have no access to your credentials or any data exchanged with these services.
Services you may optionally connect to include:
- OpenRouter (openrouter.ai) — AI model routing
- Chub.ai — character card repository
- RisuRealm (realm.risuai.net) — character card repository
What each service receives. The mobile app contacts a third party only when you trigger the action. Specifically:
- OpenRouter — when you tap an AI button (Assist, Continue, Rewrite), the app sends the character card fields you asked the model to act on, the model identifier you chose, and your own API key (for billing). The request also includes the headers HTTP-Referer: https://github.com/RPFiend/GrimoireMobile and X-Title: GrimoireMobile, which OpenRouter requires. The full URL contacted is https://openrouter.ai/api/v1/chat/completions. When you open Settings, the app also fetches https://openrouter.ai/api/v1/models to populate the model picker; this request does not include your API key and is cached on-device for one hour.
- Chub.ai — when you import a character from a Chub URL, the app sends a GET to https://api.chub.ai/api/characters/{author}/{name}?full=true with a User-Agent: GrimoireMobile/1.0 header. If the imported card has an avatar, the app also fetches that image from Chub's CDN. Chub receives the URL you submitted.
- RisuRealm — when you import a character from a RisuRealm URL, the app sends a GET to https://realm.risuai.net/api/download?id={id}&format=json-v2&cors=true with a User-Agent: GrimoireMobile/1.0 header. RisuRealm receives the URL you submitted.
Each service operates under its own privacy policy. Hollow Glyph Studios is not responsible for the data practices of these third-party services.
The Grimoire (Desktop) — Vercel Hosting
The Grimoire desktop application is hosted on Vercel. All application data — character cards, settings, preferences — is stored exclusively in your browser's local storage on your own device and is never sent to our servers.
As part of standard hosting infrastructure, Vercel may automatically collect server access logs including IP addresses, request timestamps, and browser/device information for security and operational purposes. This data is collected and governed solely by Vercel under Vercel's privacy policy. Hollow Glyph Studios does not access, use, or retain any Vercel infrastructure logs.
Clearing your browser's local storage will permanently delete all locally stored Grimoire data. We cannot recover this data as it is never stored on our servers.
Vercel Web Analytics: The Grimoire (Desktop) uses Vercel Web Analytics — a privacy-friendly, cookie-free analytics service that does not collect personal identifiers. It records anonymous page views, referrers, and country-level geographic data only. You can opt out by enabling "Do Not Track" in your browser. See Vercel's analytics privacy policy.
Children's Privacy
None of these products are directed at children under the age of 13. We do not knowingly collect any information from children under 13. If you believe a child under 13 has provided information through any Hollow Glyph Studios product, please contact us and it will be promptly addressed.
The Grimoire Mobile — App Store Disclosures
For App Store and Google Play transparency requirements, The Grimoire (Mobile):
For the precise data categories declared on each store, see the App Privacy section of the iOS App Store listing and the Data Safety section of the Google Play listing. Hollow Glyph Studios does not have access to those submissions.
Changes to This Policy
Any updates to this Privacy Policy will be posted at hollowglyphstudios.com/privacy-policy with an updated effective date. Material changes to the mobile app's data practices will also be noted in the release notes for the next published version. Continued use of our products after changes constitutes acceptance of the updated policy.
Contact
For any privacy-related questions or concerns: