Lantore is a safety app that a parent or guardian installs on their own child's Windows PC. This notice is for guardians (our customers). There is a separate children's notice written for kids. This is a plain-language beta draft that is pending legal review. Where it says "we", it means Lantore.
The short version
- A grown-up installs Lantore openly on their child's PC. The child is told, sees an icon, and can see what is monitored.
- Lantore reads chat on the PC, and only while your child is taking part in a chat or voice session (and for a few minutes after). It does not read what other players say when your child is not involved. Typing outside chat (documents, searches, passwords) is never captured.
- Before anything leaves the PC, names and personal details are replaced. If a quick automated check finds nothing concerning, nothing about that conversation is kept.
- If something is flagged, we keep a short redacted excerpt, an alert, and (only if needed) tiny screenshots, for a limited time. Audio is never stored or uploaded.
- We do not sell data, show ads, or use your child's chats to train AI models.
- You can export or delete your child's data, and withdraw any permission, at any time.
Who this covers
Guardians (parents and legal guardians) are our customers and the only people who create accounts. Children do not have accounts, emails or passwords. A child profile has a first name, an age group and birth year, in-game names you add, and your settings. Lantore is for children under 18. It is not for monitoring partners, employees or other adults.
What we collect
| Who | What | Why |
|---|---|---|
| Guardian | Email, optional name, password (stored only as a salted hash), optional phone number and notification settings | To run your account and reach you |
| Guardian | Verification result from our verification partner, your attestations, the notices you acknowledged and the permissions you granted (with dates and versions) | To show that a verified adult set Lantore up and agreed to each purpose |
| Child profile | First name, age group, birth year, in-game and chat names, sensitivity setting, country and region of residence | To apply the right rules and show the right level of detail |
| PC | Device name, Windows and Lantore version, last-seen time, health of screen capture, typing and voice features | To keep Lantore working and to tell you if it cannot see |
| Context | Which app or website was open (and the window title, only for chat apps, with names hidden) | So alerts can say where something happened. We do not record what you browse elsewhere |
| Conversation | Redacted text windows (names replaced with Player 1, Player 2; emails, phone numbers and addresses masked) | For the automated check. Kept only if flagged |
| Flagged only | A short redacted excerpt, the alert and its analysis, and low-resolution screenshots from around the moment | So you can understand the alert |
| Support | What you write to us | To reply |
On the PC and in the cloud
Stays on the PC: raw chat text before it is redacted; a rolling buffer of tiny screenshots (about 30 minutes, encrypted); voice, if you enable it, is turned into text on the PC and the audio is discarded immediately.
Goes to the cloud: redacted text windows for checking; device health; the things in the table above. Our cloud runs on Cloudflare. For the quick check and the closer review of flagged conversations, redacted text goes to an AI model provider through a routing service, configured for no retention and no training on your data (see subprocessors).
Engagement-first
Lantore does not continuously read the screen. It reads chat and voice only while your child is taking part (typing in a chat, speaking in a voice session) and for a few minutes afterwards. What other players say when your child is not involved is not read, not stored and not sent. Typing outside chat is never captured.
Retention schedule
| Data | Stored? | Kept for |
|---|---|---|
| Chat text that was not flagged | Never (held in memory only while it is being checked) | 0 |
| Check log (time, risk level, categories, app or site, line count; no text) | Yes, without any text | 30 days |
| Counterpart state (scrambled key, counters, risk history, trusted flag; no usernames) | Yes, without usernames | 90 days |
| Flagged conversation text (redacted), the alert and its analysis | Yes, only when flagged | 90 days (you can delete it sooner) |
| Evidence screenshots (low resolution) | Only when flagged or when you ask | 30 days |
| Audio | Never leaves the PC; never stored anywhere | None |
| Account, child profiles, devices, notification settings | Yes | Until you delete them |
| Consent and authority records | Yes, as evidence | As long as the law requires after a profile ends (to be fixed with counsel), then deleted |
The retention schedule has the same table with notes.
Why we use your information
- Your consent as guardian, given separately for each purpose when you set up and changeable at any time.
- To provide the service you asked for.
- Our legitimate interests in keeping the service secure, preventing misuse and fixing problems.
- Legal obligations, for example responding to valid legal requests or mandatory reporting duties.
Children's privacy and COPPA (United States)
Lantore is directed to parents, not to children. Before we create a profile for a child, we take reasonable steps to confirm that an adult is setting it up: a verification by our verification partner (where required), your attestation that you are the child's parent or legal guardian, and your direct, informed consent to each purpose. We give you this notice and the children's notice before collecting any child information. During the beta, a card-based verification step may not be in place for every region; we say so on the setup screens.
You can at any time review what we hold about your child, withdraw consent, stop further collection, and have the information deleted. We collect only what is reasonably needed for the alerts you asked for, we do not condition anything on collecting more, we keep it only for the periods above, and we run a written security program. We do not sell or share children's information for advertising.
Regions
Lantore is available only where we have checked that we can serve families properly. See the regions page for the current list.
- United States: available with limits. Voice monitoring is not available. Some states require everyone's consent to record or intercept communications; Lantore reads on-screen text on your own child's PC, but you are responsible for how you use it. Apart from COPPA, state privacy laws may give you extra rights, which we honour for all US guardians.
- Canada (outside Quebec): available. We follow PIPEDA principles: meaningful consent, limited collection and access rights. Quebec is not yet available.
- Australia: available. We aim to follow the Australian Privacy Principles. A child notice is shown, and in Australia a child aged 15 or over can be shown more control over their own information.
- New Zealand: available. We aim to follow the Privacy Act 2020 principles.
- UK and EU/EEA: coming, not yet available. We will not serve these regions until the required assessments, local representatives and local-language notices are in place.
- Other regions: not yet available, or not offered. We explain why on the regions page.
Who we share with
We share data only with the providers that help us run Lantore, listed with their purposes, data categories and locations on the subprocessors page, or when the law requires it. We do not sell data. Lantore never contacts schools, police or anyone else for you.
Moving data between countries
Our providers operate in several countries, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses). Exact storage locations are listed with each provider.
Security
Everything travels over HTTPS. Passwords are stored with PBKDF2-SHA256 (at least 210,000 iterations). Device credentials are random 256-bit tokens that we keep only as hashes. Sessions use secure, HttpOnly cookies. Secrets are kept in encrypted configuration, and chat text is never written to logs. No system is perfectly secure; if something goes wrong that affects you we will tell you promptly. See security and report problems to security@lantore.com.
Your rights and how to use them
You can export or delete a child's data and your account from the portal. For anything else, see Your data rights. We answer requests within 30 days. You can also withdraw any permission in the portal; doing so takes effect straight away and may stop monitoring.
Visible by design
Software that watches a person without their knowledge is stalkerware, and it is harmful. Lantore must be installed by a guardian on their own minor child's device, always shows an icon, tells the child what is monitored and which alerts were sent about them, uninstalls normally, and never hides from the user or from security software. We close accounts used to monitor adults.
Cookies and tracking
This website has no advertising or analytics trackers. The parent portal uses one essential session cookie, and your theme choice is stored in your browser.
Contact
Email privacy@lantore.com, or use the contact form. Our postal address and data protection contact will be listed here before general availability.
Changes
We will update this notice when anything changes and email account holders about material changes. Each version is kept, and the version you acknowledged is recorded with your consent.