Privacy Policy

Lantern (“we”, “us”) runs visitlantern.com and the Lantern analytics service.

When you create an account and use Lantern, we collect:

• Account details: your name, email address and a securely hashed password. If you sign in with Google, we receive your name, email and profile picture from Google.
• Security information: basic details about the devices you sign in from, to keep your account secure.
• What you set up: the domains you add, their time zones, the funnels you save and your email preferences.
• Billing: your plan, billing status and invoice history. Payments are handled by Dodo Payments, our merchant of record. We receive your name, email, billing country and payment status, but never your full card details.
• Support: anything you send us by email.

We use this to run your account, show you your analytics, send the weekly email report (you can unsubscribe from any report), bill you, support you, and keep the service secure. We don't sell it, and we don't use it for anyone else's advertising.

When a website uses Lantern, our script records visits to that website. The website owner decides to use Lantern and what to track; for this data, they are the controller and we process it on their behalf. If you visited a website that uses Lantern and have a question about your data, please contact that website first. We'll help them answer you.

For each visit, Lantern records:

• The page address, the referring page, and any campaign (UTM) tags in the link
• Browser, operating system, device type, screen width and language, from the browser's own information
• Approximate location (country, region and city) and network type, worked out from the IP address when the visit arrives
• Time on page and how far the page was scrolled
• Goals the website tracks, such as a sign-up or a purchase, with any details it attaches

IP addresses are never stored. They are used once, when the visit arrives, to work out the approximate location, and then discarded.

Recognising returning visitors. The script stores a random visitor ID in a first-party cookie on the website's own domain and in the browser's local storage. That's how one person is counted once across days and across the site's subdomains. It sets no third-party cookies and doesn't follow anyone across different websites. A website may also link a visit to its own user ID after you sign in there.

Automated crawlers. Websites can also report visits from bots and AI crawlers. These records describe bots, not people.

We don't sell personal information. We share it only with service providers that help us run Lantern, under contracts that require them to protect it:

• Hosting and infrastructure providers that run our website, the tracking script and our databases
• Dodo Payments, our merchant of record, which handles checkout, subscriptions, invoices and tax
• An email provider, to send account and report emails
• An AI provider, for features such as suggested funnels. It receives only totals, such as page paths and goal counts, never visitor-level data
• Google, if you choose to sign in with Google

Some of these providers process data outside India, including in the United States, with appropriate safeguards. We may also disclose information if the law requires it, or to a buyer if Lantern is ever sold, under the same commitments as this policy.

• Analytics data: for as long as your plan includes (3 years on Starter, 5 years or more on Growth), or until you delete the site. Deleting a site deletes all of its recorded visits.
• Your account: while you have it. Ask us to delete it and we'll remove your account and sites within 30 days.
• Billing records: as long as tax and accounting law requires, typically up to 8 years.

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and, in the UK and EU, the GDPR, you can ask to access, correct, export or delete your personal information, withdraw consent, or object to how we use it. Email hello@visitlantern.com. We reply within 30 days, and you can also complain to your local data protection authority.

If you're a website visitor, you can clear or block cookies and local storage in your browser at any time; Lantern then treats you as a new visitor.

If you add Lantern to your website, you're responsible for telling your visitors about it in your own privacy policy, and for any consent the law requires where your visitors are. Don't send us sensitive personal data, such as names, email addresses or health information, in page addresses, goal names or goal details. See our Terms of Service.

Data travels over encrypted connections, passwords are hashed, and access to our systems is restricted. No system is perfectly secure, but if a breach affects your information, we'll tell you promptly.

Lantern is a service for businesses. We don't knowingly collect information from children under 18 to create accounts.

If we change this policy, we'll update the date at the top. If a change materially affects customers, we'll email you first.

Privacy questions and requests: hello@visitlantern.com.