• v3.8.0 1ca68d2885

    v3.8.0
    All checks were successful
    CI / Docker image build (push) Successful in 11s
    Release / Create Forgejo release (push) Successful in 13s
    Release / Build and push versioned images (push) Successful in 24s
    CI / Backend lint (ruff) (push) Successful in 3m9s
    CI / Frontend tests, audit, and build (push) Successful in 3m52s
    CI / Bot tests and audit (push) Successful in 6m20s
    CI / Backend migration, tests, and audit (push) Successful in 8m16s
    Stable

    claude-bot released this 2026-07-18 09:11:29 +00:00 | 665 commits to main since this release

    Privacy & data lifecycle: you control what's kept, and for how long.

    Configurable retention, per-player erasure, account deletion, and a completed
    audit log — the data-lifecycle groundwork a privacy-respecting (and hostable)
    deployment needs. Ships four Alembic migrations. No API contract change —
    BOT_CONTRACT_VERSION stays 1.

    Added

    • [webapp] Configurable data retention — instance-wide defaults plus
      per-campaign overrides for how long raw audio and transcripts are kept. The
      recommended posture is transcript-only: raw voice recordings are deleted right
      after they're transcribed, and never-approved sessions can no longer hoard
      audio forever. Transcripts can optionally expire after N months (clearing the
      text + search index; summaries and wiki entries are untouched). (#119)
    • [webapp] Per-player erasure — a GM or admin can scrub a departed player's
      contributions from a campaign: their transcript lines become [removed] (the
      timeline stays readable and their words become unsearchable), their voice
      recordings and attributed quotes are deleted, and affected sessions show an
      erasure notice. (#118)
    • [webapp] Account deletion — self-service (Profile → Delete account) and
      admin-initiated. Your memberships and personal data are removed; authored
      content is anonymized to "Deleted user" so campaigns stay intact. You're
      blocked (with guidance) if you're the sole GM of a campaign, and prompted to
      export your data first. Deletion is local-only — signing in again starts a
      fresh, empty account. (#117)
    • [webapp] Audit log — the admin audit log now covers destructive and
      administrative actions with campaign scoping and target identification, a new
      filterable Audit log admin view (by actor, event, campaign, date), and
      automatic pruning after a configurable window. (#120)
    Downloads