Privacy, in plain words
Lantern is a small, closed pilot. This page says what we keep, who can see it, and how to take it with you or remove it. Last updated October 2026.
What we keep
- Your email address and the name you sign in with.
- Your traveller: the name, pronouns and look you chose.
- Where you have been on the map, the choices you made, and the tools in your pack.
- Your journal: the lines the game writes and the lines you write, including hidden ones.
- Who is in your party, invitations you sent or received, and campfire notes you leave.
- Your settings, so they follow you to another device.
- Anything you send through “Tell us how this fits”.
- How many words the Guide used for you each day, as a number, so it can rest when it has done enough.
Some of this can say something about your health. We treat all of it as sensitive, and we do not ask for a diagnosis.
What we do not keep
- Your conversations with the Guide. They last for the visit and are gone when you leave the page.
- Usage analytics or advertising trackers. There are none.
- Names next to safety checks. When the Guide steps aside to point to help, we count that it happened, not who it was.
Who can see it
- You can see everything.
- People in your party see only what you share with them, one item at a time. You can stop sharing whenever you like, and they never see your hidden lines.
- The small team running the pilot can see account details. They export or close an account on your behalf only when you ask, and every time they do it is logged.
The Guide and the AI provider
The Guide is an AI character, and it says so. Its replies come from Anthropic’s Claude models. The Guide sees your messages and only the context you allow in Settings: where you are on the map, what is in your pack, and your journal (off unless you turn it on).
Anthropic receives that text to write a reply. Under its commercial terms it does not use it to train its models, and it keeps it only for a limited time for safety checks before deleting it.
Where it lives
The app runs on Vercel and the database is a Neon Postgres database. Both are overseas services, so your data may be stored outside Aotearoa New Zealand. Your settings are also kept in this browser so pages look right straight away. The only cookie is the one that keeps you signed in.
How to take it with you, or leave
- Export: in Settings, “Export my data” gives you one file with everything above, and your journal as a readable page.
- Close your account: also in Settings. You are signed out at once. After 30 days your account and everything linked to it is permanently deleted. Database backups roll over after that within a short window.
- Changed your mind inside the 30 days? Ask us and we can reopen it.
Your rights
We aim to meet the New Zealand Privacy Act 2020 and the Health Information Privacy Code 2020. You can ask to see or correct anything we hold about you. Contact: privacy contact to be confirmed before the pilot opens.
If you are not happy with how we handle it, you can contact the Office of the Privacy Commissioner at privacy.org.nz.