Privacy Policy

This Privacy Policy explains how Lanthorn (“Lanthorn,” “we,” “us,” or “our”) — a product of Homeland Response Solutions LLC, a Utah limited liability company — collects, uses, and protects information when you visit getlanthorn.com, use our values-discovery tools, or purchase our digital products.

Update check. Your downloaded Lanthorn asks our site once, when you open it, whether a newer version has been published. It sends nothing about you — no values, no plan, no progress, no identifier. It requests a single small file the same way it already loads artwork, and if you are offline it simply says nothing. Nothing is ever downloaded or changed without you choosing it.

1. Information we collect

Information you provide

• Email address — if you sign up for Lanthorn, updates, or our list. Email is managed through our email provider (MailerLite).
• Whether you run a business — when you ask us to build your Lanthorn we also ask one question: whether you run a business, and roughly how many people are in it. It is a single choice from a short list, never free text about your company. We use it for one thing: to decide whether you ever see anything about the business work we do. If you answer that Lanthorn is just for you, you are never shown it and never emailed about it. It is stored with your email at our email provider (MailerLite).
• What you send us through the “Work with me” form — your name, email, an optional phone number, a description of your business, and whatever you tell us about what is going wrong. When you press send, your message is delivered to us by Web3Forms, a form-delivery service that emails us your submission and briefly retains it so it cannot be lost in transit; it is governed by Web3Forms’ own privacy policy in addition to ours. Your draft answers also save in your own browser as you type, so nothing you write is lost if you step away. We use what you send only to reply to you. If you give us a phone number we use it to reply to you, not to add you to any calling or texting list.
• Your restore link — if you give us your email so we can send your Compass, we also store a restore link alongside it with our email provider (MailerLite). That link contains an encoded copy of your six values and anything you wrote about them, so that you can reopen your Compass on another device or after clearing your browser. It is what makes recovery possible. If you would rather we did not keep it, email us and we will remove it — you can still rebuild your Compass any time by replaying Lanthorn.
• Purchase information (historical) — Lanthorn is now free and we no longer sell Two Weeks to True North. For anyone who bought it while it was on sale, our merchant of record (Paddle) collected your name, email, payment details, and billing address (used to calculate any applicable sales tax or VAT). We did not see or store your full payment card number. Those records are kept as long as tax and accounting rules require. What you bought still works and nothing has been taken away from you.
• Messages — anything you send us by email when you contact support.

Information stored only on your device

• Your selections, rankings, and progress in Lanthorn and the Daily Compass are saved in your browser’s local storage. This data stays on your device and you can clear it any time through your browser. We do not receive it, with one disclosed exception: if you asked us to email you your Compass, the restore link described above is stored with our email provider so you can recover it. Your 14-day plan is never transmitted to us at all — it is created in your own AI chat and stays in your browser.

Backing up your plan

• Your Compass can save your 14-day plan as a file on your device, or open your own email app with the plan ready to send to yourself. Both happen entirely on your device — the plan is never sent to us and we never hold a copy of it.

Information collected automatically

• Aggregate, anonymous usage data via Plausible Analytics, a privacy-friendly service that uses no cookies, collects no personal data, and does not track you across sites — for example, total page views, referring site, and general country/device type, all in aggregate. This data cannot be used to identify you.
• Cookies. Our website does not use advertising or cross-site tracking cookies, and our analytics are cookieless. Cookies may be used only where strictly necessary to operate the checkout, which is handled by Paddle on its own pages. You can control or clear cookies through your browser settings.

2. How we use your information

• To provide the tools and deliver the products you request;
• To process purchases, send receipts, and provide customer support (via Paddle);
• To send updates, content, and offers if you opted in (you can unsubscribe at any time);
• To measure and improve our website and products;
• To protect against fraud and abuse, and to comply with our legal obligations.

3. Payments & merchant of record

Our digital products are sold through Paddle, which acts as the merchant of record for purchases. This means Paddle processes your payment, handles billing, and collects and remits applicable sales tax/VAT. Your payment is governed by Paddle’s own privacy policy and terms in addition to ours. We receive order confirmation details (such as your name, email, and what you purchased) but not your full card information.

4. How we share information

We do not sell your personal information. We share information only with service providers that help us run Lanthorn, and only as needed:

• Paddle — payments, checkout, tax, and order fulfillment (merchant of record);
• MailerLite — email list management and delivery;
• Plausible Analytics — privacy-friendly, cookieless website analytics (aggregate only);
• Our web host — to serve the website.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of our users or others.

5. Data retention

We keep personal information only as long as needed for the purposes described here — for example, we keep your email while you are subscribed and order records as long as required for tax, accounting, and legal purposes. You can ask us to delete your information as described below.

6. Security

We use reasonable administrative and technical safeguards to protect your information, and we rely on established providers (Paddle, MailerLite, Google) for the data they handle. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

7. Your rights & choices

• Unsubscribe anytime using the link in any email we send.
• Access, correct, or delete the personal information we hold about you — just email us.
• Cookies: our site uses no tracking or analytics cookies, so there is nothing to consent to for analytics; you can still control or delete any cookies through your browser settings.
• EU/UK users (GDPR): you have rights to access, rectification, erasure, restriction, portability, and objection; you may also lodge a complaint with your local data protection authority.
• California users (CCPA/CPRA): you have the right to know, delete, correct, and opt out of “sale” or “sharing” of personal information. We do not sell your personal information.

Our legal bases (GDPR). Where GDPR applies, we process personal data based on your consent (for marketing emails), performance of a contract (to deliver products you purchase), and our legitimate interests (to operate, secure, and improve Lanthorn). You may withdraw consent at any time.

To exercise any of these rights, contact us using the details below. We will respond within the time required by applicable law.

8. International users

We are based in the United States, and our service providers may process your information in the U.S. and other countries. Where required, Paddle and our other providers use appropriate safeguards for international data transfers.

9. Children’s privacy

Lanthorn is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” above and, where appropriate, provide additional notice. Your continued use of the site after changes take effect means you accept the updated policy.

11. Contact us

Questions or requests about this policy or your information: