Privacy Policy

Last updated: October 2, 2026

1. Introduction

Artisam Labs ("we", "us") builds Lantern, a non-custodial Stellar wallet browser extension. We are committed to protecting your privacy. This policy explains what we collect through our website and the Lantern extension, and how we use it. By using our website or the extension, you agree to this policy.

2. Information We Collect

Lantern is designed to collect as little as possible:

Wallet data stays on your device. Your recovery phrase, private keys, and password are encrypted and stored locally. We never receive, transmit, or have access to them.
Website analytics. Aggregate, non-identifying usage data (pages visited, approximate region, device/browser type) to understand traffic.
Download links. When you use one of our download links (for the Android app or the browser extension), our server records that a download was requested: which build, the version, the link's campaign tag, an approximate country, and a coarse browser type (Android, desktop Chrome, or other). The same applies to our "Join the alpha" link: before sending you on to the testers' WhatsApp group, our server records that the link was used, with its campaign tag, an approximate country and a coarse browser type. We do not store your IP address or your browser's full user-agent string. This is a server log, kept separately from the optional in-app usage analytics described below, and it is deleted on the same schedule.
The demo playground (golantern.xyz/demo). Each time a scan finishes on the playground, the page sends our server one anonymous analytics event: the verdict's risk level and action, and whether the transaction was pasted, composed or one of the built-in examples. That event never contains the transaction, an address, an amount or anything you typed, and never a wallet address. The page uses no cookie and stores nothing in your browser, and the random id the event carries is new on every page load, so two visits can't be linked. These events are deleted on the same schedule as the in-app analytics. Separately, to write the plain-language summary, the playground sends the scan's verdict and what the transaction moves (testnet addresses and amounts) to our server, which passes them to our AI provider to write one sentence. Our server doesn't store them. If that service is unavailable, the page shows a rules-based summary instead. If you report an address from the playground, you connect your own Stellar wallet, which signs the report; the report, including your address, is then recorded publicly on the Stellar test network.
The web app (app.golantern.xyz). The wallet can also run in your browser as a web app, on the Stellar test network only. Your wallet is stored in that browser, on your device, encrypted with your password, the same way the extension and the Android app store it. It is never sent to us, and we can't read it or recover it: if the browser's data is cleared, or you lose the device, you'll need your recovery phrase. The web app asks your browser to keep its data, and on an iPhone we recommend adding it to your Home Screen, since Safari otherwise deletes a website's data after 7 days without a visit. The web app talks only to the Stellar test network's public servers and to our server, and its usage analytics follow the same opt-in as the wallet's, described below. If you turn them on, the web app also sends, once, which of our links first opened it (for example, our homepage), as one of a few fixed labels and never the link itself.
In-app usage analytics (optional, off by default). The wallet can send anonymous, enum-only usage events (which screens ran, whether a security check fired) only after you turn the switch on under Settings → Privacy. Alpha-tester builds may attach your public wallet address to those events; the switch says so. You can turn it off and delete the data at any time.
Cookies & preferences. Small files that remember choices such as your cookie consent.
Contact details. If you email us, we keep your message and address to respond.

Blockchain transactions you broadcast are public on the Stellar network by design and are not created or stored by us.

3. How We Use Your Information

To operate, maintain, and improve the website and the extension.
To respond to support requests and communicate about the Beta.
To analyze traffic and diagnose technical issues.
To detect, prevent, and address fraud, abuse, or security incidents.
To comply with applicable legal obligations.

4. Sharing Your Information

We do not sell your data. We share information only with service providers (e.g., hosting and analytics) bound by confidentiality obligations, where required by law, or to protect the rights and safety of our users. Network and blockchain data is inherently public.

5. Data Retention

We retain website and contact data only as long as needed for the purposes above or as required by law, then delete or anonymize it. Wallet data is retained solely on your own device, under your control, until you remove it.

6. Data Security

We use reasonable technical and organizational measures to protect data. Wallet secrets are encrypted on-device. However, no method of transmission or storage is completely secure, and you are responsible for safeguarding your recovery phrase and password.

7. Cookies

We use a small number of cookies:

Essential — required for the site to function and to remember your consent choice.
Analytics — help us understand usage in aggregate.
Preference — remember settings you choose.

You can accept or decline non-essential cookies via our banner, and manage cookies in your browser settings.

8. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, withdraw consent, or opt out of marketing. To exercise these rights, contact us at hello@artisam.xyz.

9. Third-Party Links & dApps

Our website and the extension's mini-app browser may link to third-party sites and Stellar dApps. We are not responsible for their content or privacy practices. Review their policies before use.

The walkthrough video on our homepage is hosted on YouTube. Nothing is loaded from YouTube when you visit the page: the preview image is served by us, and the player is only loaded, from Google's youtube-nocookie.com domain, once you press play. From then on Google's privacy policy applies to the player. Without JavaScript, the video is a plain link to YouTube.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date. Continued use after changes constitutes acceptance.

11. Contact Us

Questions about this policy? Email hello@artisam.xyz or visit artisam.xyz.