Privacy Policy
The short version: Lantern has no accounts, no analytics, no advertising and no tracking. Deep Dark Abyss Productions doesn't collect, store or sell any data about you or how you use the app. Lantern is a network toolkit, so its tools contact the servers and devices you point them at, and a few outside services, as described below.
What stays on your device
Everything you enter and every result Lantern shows stays on your device unless you copy or share it yourself. This includes:
- Your settings and saved Syslog captures.
- Saved SSH sessions. Their passwords are kept in your device's Keychain.
- Your Spamhaus DQS key, if you add one, kept in the Keychain.
- Wi-Fi details such as the network name. iOS requires location permission to read them. Lantern uses that permission only to show you the details and never records or sends your location.
- Local network scans, Bonjour browsing, SNMP and other local tools, which talk only to devices on your own network.
When Lantern contacts other servers
Each tool contacts only what it needs to do what you asked. Those servers see your device's public IP address, as any internet server does, plus the query itself.
- The hosts you test. Ping, Traceroute, Port Scanner, SMTP tools, SSL Certificate, HTTP Request Inspector and similar tools connect to the address you enter.
- DNS servers. DNS tools send the names you look up to your network's resolver, or to the public resolvers a tool compares (such as Google, Cloudflare and Quad9). Blacklist checks are DNS queries to the blacklist operators, such as Spamhaus, and include the IP address or domain being checked. ASN lookups go to Team Cymru's DNS service.
- WHOIS servers. Whois and IP Whois send your query to IANA and to the registry that holds the record.
- IPinfo (ipinfo.io). IP Geolocation sends the addresses you enter to IPinfo's API to look up their country and network.
- Public IP services. To show your public IP address, Lantern asks OpenDNS, and if that fails ipify (api.ipify.org) or icanhazip.com.
- Measurement Lab (measurementlab.net). Speed Test runs on M-Lab's open NDT7 servers. M-Lab publishes every test result as open data, including your public IP address, under its own privacy policy. If you don't want that, don't run Speed Test.
- crt.sh. Certificate Transparency sends the domain you search to crt.sh.
- Time servers. TimeSync queries public NTP servers such as time.apple.com and pool.ntp.org.
- Reference data. Lantern downloads updated reference lists: the blacklist list from lantern.deepdarkabyss.com (our own site, hosted on Google Firebase, which keeps standard web server logs), the IEEE device-maker list, the IANA service-name list, and, if you choose to install it, the DB-IP city database. These downloads send nothing about you beyond the request itself.
These services are run by others and have their own privacy policies. Lantern sends them only the query needed for the tool you're using.
Purchases
Lantern Pro is bought through Apple's App Store. Apple handles the payment. Lantern checks your purchase on the device with StoreKit and receives no payment or personal details.
Children
Lantern isn't directed at children and collects no personal information from anyone.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Questions about privacy: support@deepdarkabyss.com