What it reads

• Only vault folders you picked in that session, through the system folder picker. The read skips state/ and asset directories and never leaves the folder you chose.
• Monster statblocks resolve against a locally installed copy of the free monster library when one is present; otherwise references stay links to the public bestiary.
• Last-used settings are stored locally so your setup survives a restart.

What it writes

• Two sanctioned lanes only: the derived player/ tree, and compare-and-swap frontmatter edits for reveals, the campaign clock, faction goal checkmarks and new session notes.
• Every write applies only if the file still reads exactly as the app last saw it; ambiguity fails closed. Your prose and other apps' regions have no write path at all.
• Nothing is sent anywhere. There is no model integration in this app today; when recap polish arrives it will run on local models like the rest of the family.

This site

• These pages are static files. The site sets no cookies and runs no analytics script.
• The releases page checks the public GitHub release feed for build metadata; that request goes to GitHub from your browser, subject to GitHub's own terms.