Privacy
Your child's conversations are not our product
Lantore is built so that we hold as little as possible. This page says exactly what we collect, where it goes, how long we keep it, and what we will never do.
Data retention
What we store, and for how long
| Data | Stored? | Kept for |
|---|---|---|
| Chat text that was not flaggedOrdinary conversations are checked and then forgotten. Nothing about them is saved in the cloud. Lantore only reads while your child is taking part in a chat or voice session (and a few minutes after), never other players' chat when your child is not involved. | Never | 0 (held in memory only while it is being checked) |
| Check log (time, risk level, categories, app, line count)A text-free record that a check happened, so we can make sure Lantore is working and never leaves you falsely reassured. | Yes, without any text | 30 days |
| Counterpart state (a scrambled key, counters, risk history, trusted flag)Lets Lantore notice when the same unknown person keeps showing up. Their name is never stored, only a one-way scramble. | Yes, without usernames | 90 days |
| Flagged conversation text (redacted), the alert and its analysisThe short excerpt behind an alert, with names and personal details already replaced on your child's PC. | Yes, only when flagged | 90 days (you can delete it sooner) |
| Evidence screenshots (low resolution)Tiny screenshots from around the flagged moment. They stay blurred until you choose to reveal them. | Only when flagged or when you ask | 30 days |
| AudioIf you turn on voice monitoring, speech is turned into text on the PC while your child is speaking in a voice session, and the audio is discarded immediately. | Never leaves the device; never stored anywhere | - |
These limits are enforced in our code, not just written in a policy. You can delete any alert immediately, and delete your whole account from Settings.
The details
When Lantore reads: engagement-first
Lantore only reads chat or voice while your child is taking part (typing in a chat or speaking in a voice session) and for a few minutes afterwards. It does not read what other players say when your child is not involved, and it does not capture typing outside chat: documents, searches and passwords are never read.
Which app or website was open
Lantore notes which app or website was open (and the window title, only for chat apps and with names hidden) so alerts can say where something happened. It does not record what you browse elsewhere. For a flagged conversation we keep a short timeline of the apps and sites open in the minutes before it, and we may note a confirmed move to another app afterwards (for example, that your child opened Snapchat). That metadata is kept only with the alert; for ordinary conversations only the app or site name goes in the text-free check log.
What stays on your child's PC
Raw chat text, before it is redacted. A rolling buffer of tiny screenshots (about 30 minutes, encrypted with a key that only that Windows account can use). Audio, if you enable voice monitoring: it is converted to text on the PC and discarded, and it is never recorded, stored or uploaded. Password fields are never read.
What we receive
Redacted text windows (usernames replaced with Player 1, Player 2, and personal details masked), plus metadata about the app being used. We also receive the account details you give us (email, optional name and phone number), your child's first name and birth year, their in-game names (so we can tell who is who), device health information, and your notification settings.
Who processes it
Our cloud runs on Cloudflare. To judge whether a conversation is concerning, redacted text is sent to an AI model provider through a routing service. We configure this for no retention and no training on your data, and we do not use free or consumer tiers for children's text. No person at Lantore reads your child's conversations. We will keep the list of subprocessors up to date on this page.
Children's privacy
Lantore is operated for parents and guardians. Accounts are created by a parent, who confirms they are a parent or legal guardian and agrees to tell their child about Lantore. We do not market to children, show ads, or build profiles for any purpose other than the alerts you asked for. Parents can review, export and delete everything we hold about their child. Where laws such as COPPA apply, we are building to them, including verifiable parental consent, a written retention policy and a written security program. This service is in beta and these processes are being finalized.
Visible by design, never "stalkerware"
Software that monitors a person without their knowledge and consent is stalkerware, and it is harmful. Lantore is built to be the opposite. It must be installed by a parent on their own minor child's device, it always shows an icon, it tells the child what is monitored and which alerts were sent about them, it uninstalls normally, and it never hides from the user or from antivirus software. We do not support monitoring adults, and we will close accounts used that way.
Security
Everything travels over HTTPS. Passwords are stored with PBKDF2-SHA256 (at least 210,000 iterations). Device credentials are random 256-bit tokens that we store only as hashes. Sessions use secure, HttpOnly cookies. Secrets live in encrypted configuration, and we do not put chat text in logs. No system is perfectly secure; if something goes wrong that affects you, we will tell you promptly. Report vulnerabilities to security@lantore.com.
Your choices
- Delete an alert (text and screenshots) at any time from the alert page.
- Export a copy of your data as JSON, or delete your account and everything attached to it, from Settings.
- Turn off any kind of monitoring for a child, or disconnect a device, whenever you like.
- Notifications: choose the channels, minimum severity, quiet hours and daily limit.
When we might share data
We do not sell data. We share it only with the service providers needed to run Lantore, or when the law requires it (for example a valid legal request, or mandatory reporting duties). Lantore never contacts schools, police or anyone else on your behalf; what happens after an alert is your decision.
Cookies and tracking
This website has no advertising or analytics trackers. The parent portal uses one essential session cookie, and your theme choice is saved in your browser.
Changes and contact
We will update this page when anything changes and note the date at the bottom of the site; for material changes we will email account holders. Questions: hello@lantore.com or the contact form. This page is plain-language information for a beta product and is subject to review by counsel before general availability.
See it for yourself
The parent portal has a "What Lantore stores" page that shows the same table, in your account.