Privacy

Gideon Lantern is operated by Gideon Solutions, LLC. This page says what Lantern stores and why.

What we store

• Your account: name, email address, time zone, and a password hash (Argon2id; we never store the password itself).
• Your message: encrypted with AES-256-GCM before it's written to the database. The keys are kept apart from the database and its backups.
• Your recipients: their names, email addresses and whether they accepted.
• History: check-ins, changes you make, and the emails Lantern sent and their outcome — never your message's content and never the secret part of a link.

Who can read your message

Lantern has to send your message on your behalf, so the service can decrypt it when it needs to: to show it to you, to send you a test, and to release it. We don't read messages. Don't include passwords, PINs or account numbers — say where to find them instead.

Email

Lantern's emails go through an email delivery provider, which handles the message in transit like any email service.

Deleting your account

Deleting your account from the Account page removes your message, recipients and history. Database backups are kept for up to 14 days and then deleted. Email already sent can't be recalled.

No tracking

No advertising, no analytics trackers, no selling of data. Lantern sets one cookie to keep you signed in, and a short-lived one for messages like “Saved.”