This is exactly how long Lantore keeps each kind of data. These limits are enforced in our code, not just written in a policy. This page is a beta draft pending legal review, and it must always match the privacy notice.
| Data | Stored? | Kept for | In plain words |
|---|---|---|---|
| Chat text that was not flagged | Never (held in memory only while it is being checked) | 0 | Ordinary conversations are checked and then forgotten. Lantore only reads while your child is taking part in a chat or voice session (and a few minutes after), never other players' chat when your child is not involved. |
| Check log (time, risk level, categories, app or site, line count; no text) | Yes, without any text | 30 days | A text-free record that a check happened, so we can show Lantore is working and never leave you falsely reassured. |
| Counterpart state (scrambled key, counters, risk history, trusted flag; no usernames) | Yes, without usernames | 90 days | Lets Lantore notice when the same unknown person keeps showing up. Their name is never stored, only a one-way scramble. |
| Flagged conversation text (redacted), the alert and its analysis | Yes, only when flagged | 90 days (you can delete it sooner) | The short excerpt behind an alert, with names and personal details already replaced on your child's PC. |
| Evidence screenshots (low resolution) | Only when flagged or when you ask | 30 days | Tiny screenshots from around the flagged moment, blurred until you choose to reveal them. |
| Audio | Never leaves the PC; never stored anywhere | None | If you turn on voice monitoring, speech is turned into text on the PC while your child is speaking in a voice session, and the audio is discarded immediately. |
| Unsent analysis windows (retry queue on the PC) | On the PC, encrypted | Up to 2 hours | If the internet is down, windows wait on the PC and are deleted if they cannot be sent. |
| Screenshot buffer on the PC | On the PC, encrypted | 30 minutes, rolling | Used only to fetch the moments around a flag or your request. |
| Account, child profiles, devices, notification settings | Yes | Until you delete them | You can delete a child or your whole account at any time. |
| Consent and authority records | Yes, as evidence | As long as the law requires after a profile ends (to be fixed with counsel), then deleted | A record that a verified guardian agreed to each purpose, with the version of each notice. |
| Rights requests (exports and deletions) | Yes | 12 months, content-free | A record that your request was handled. |
Deleting sooner
You can delete any alert (text and screenshots) immediately, delete a child's data, or delete your account from the portal. Deleting your account removes everything above except what the law requires us to keep, which is limited to the consent and authority record.