Lantern Post
A card is between two people.
That’s the whole design. Here is exactly what we keep, what we count, and what we will never do — in plain language, because the promise only works if you can read it.
We count lanterns, not lives.
To know whether Lantern Post is working, we keep simple tallies: a card was created, a link was shared, a card was opened, a lantern was tapped, a reveal was clicked, a light was passed on. Counters — nothing more. We never log or analyze what a card says, which reveal was chosen by whom, or who received what.
Recipients are never tracked. Ever.
If someone sends you a light, you are a guest here. No account, no cookies, no fingerprinting, no being asked who you are. When you open a card, an anonymous counter on that card ticks up by one. That is the entire footprint of your visit.
Your words stay yours.
The personal touches you write — your “why this one” line, your name if you sign it — are message content between you and one other person. We store them for exactly one purpose: rendering your card. They are never analyzed, never fed into metrics, never in our logs.
Senders: the minimum for the service.
If you send cards, we keep your email (so the magic sign-in link has somewhere to go) and the cards you’ve made. That’s the list. Ask us to delete it and we will.
What we check instead.
The scrutiny goes on the links, not on you. Every reveal destination is verified against a strict allowlist and checked for safety before it can travel, and rechecked when it’s opened. Every light points home first.
No ad trackers. No analytics scripts. No selling, sharing, or “partners.” If any of this ever changes, this page changes first — but we built the product so it doesn’t have to.