-
v3.8.0
StableAll checks were successfulCI / Docker image build (push) Successful in 11sRelease / Create Forgejo release (push) Successful in 13sRelease / Build and push versioned images (push) Successful in 24sCI / Backend lint (ruff) (push) Successful in 3m9sCI / Frontend tests, audit, and build (push) Successful in 3m52sCI / Bot tests and audit (push) Successful in 6m20sCI / Backend migration, tests, and audit (push) Successful in 8m16sreleased this
2026-07-18 09:11:29 +00:00 | 665 commits to main since this releasePrivacy & data lifecycle: you control what's kept, and for how long.
Configurable retention, per-player erasure, account deletion, and a completed
audit log — the data-lifecycle groundwork a privacy-respecting (and hostable)
deployment needs. Ships four Alembic migrations. No API contract change —
BOT_CONTRACT_VERSIONstays 1.Added
- [webapp] Configurable data retention — instance-wide defaults plus
per-campaign overrides for how long raw audio and transcripts are kept. The
recommended posture is transcript-only: raw voice recordings are deleted right
after they're transcribed, and never-approved sessions can no longer hoard
audio forever. Transcripts can optionally expire after N months (clearing the
text + search index; summaries and wiki entries are untouched). (#119) - [webapp] Per-player erasure — a GM or admin can scrub a departed player's
contributions from a campaign: their transcript lines become[removed](the
timeline stays readable and their words become unsearchable), their voice
recordings and attributed quotes are deleted, and affected sessions show an
erasure notice. (#118) - [webapp] Account deletion — self-service (Profile → Delete account) and
admin-initiated. Your memberships and personal data are removed; authored
content is anonymized to "Deleted user" so campaigns stay intact. You're
blocked (with guidance) if you're the sole GM of a campaign, and prompted to
export your data first. Deletion is local-only — signing in again starts a
fresh, empty account. (#117) - [webapp] Audit log — the admin audit log now covers destructive and
administrative actions with campaign scoping and target identification, a new
filterable Audit log admin view (by actor, event, campaign, date), and
automatic pruning after a configurable window. (#120)
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- [webapp] Configurable data retention — instance-wide defaults plus