What we keep, and why.

What we store

Your account email and display name. The organizations, groups and memberships you belong to. Your API keys, stored as a hash, never the plain key. A log of your agent's calls to Lantern: which tool, when, which key, which user and organization, which spark, the IP address and user agent, a device fingerprint derived from those, how long the call took and whether it succeeded. Any spark proposal or feedback your agent submits. Billing records from our payment processor, Polar: subscription id, plan, seats and amounts. Polar holds your payment details; we never see or store a card number.

Why we keep it

Account data runs your account. Call logs let us diagnose problems, enforce fair use and catch a shared key. Proposals and feedback are how the library gets better. Billing records reconcile what you were charged with what you owe.

Who else touches it

Authentication runs on Supabase, with your data hosted in Canada, region ca-central-1. You can sign in with Google, GitHub, or an email and password, and you can turn on two factor authentication. Transactional email, like sign-in links and receipts, goes out through Resend. Billing runs through Polar. None of these process your data for their own purposes; they process it to run Lantern.

We do not run advertising, we do not sell your data, and there are no tracking pixels on this site.

Cookies

The site sets one cookie: the session token that keeps you signed in. It stays in your browser and is not used for tracking or advertising.

How long we keep it

Account data stays for the life of your account. Call logs are kept for operations and abuse prevention and are deleted on request. Delete your account, or ask us to delete specific data, by writing to the contact address above.

Your data, your call

Write to hello@lantern.both-hands.com to export what we hold about you or to have your account and its data deleted.

Governing law

This policy is governed by the laws of Quebec, Canada.