Privacy Policy

Scope

This Privacy Policy applies to the Lanterne web application ("Service") operated by Lanterne Rouge ("we", "us", or "our"). It describes how we collect, use, and share information when you visit our website, create an account, or use the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect information you provide directly when creating an account or using the Service:

• Account information — your name, email address, and profile photo, provided through our authentication provider (Clerk).
• Project data — routes, virtual activities, points of interest (POIs), performance models, and project settings you create and save to the cloud.
• Organization information — team names, member roles, and invitations when you create or join an organization.
• Support requests — ticket content, messages, and attachments you submit through our support system.
• Payment information — billing details are collected and processed directly by Stripe. We do not store credit card numbers or full payment details on our servers.
• Legal acceptance records — timestamps, IP addresses, and user-agent strings recorded when you accept our Terms of Service and Disclaimer.

Information from Using the Service

When you use the Service, we may automatically collect:

• Usage data — pages visited, features used, and interactions with the editor.
• Device and browser information — browser type, operating system, screen resolution, and language preferences.
• Log data — IP address, access times, and referring URLs when you interact with our servers.

Important: Real GPS activity files (recorded rides) that you import into the editor are processed entirely in your browser. These files are never uploaded to or stored on our servers. Only project-level data you explicitly save to the cloud is transmitted.

Information from Other Sources

We may receive information about you from third-party services you use to interact with the Service:

• Clerk — profile information from your authentication provider (e.g., Google, email), including name, email, and avatar.
• Stripe — subscription status, payment history, and billing events via webhooks.

How We Use Your Information

To Provide and Operate the Service

We use your information to create and manage your account, save and sync your projects across devices, manage organization membership and permissions, process payments and manage subscriptions, and deliver in-app and email notifications about your account activity.

To Assist You with a Request

When you contact us through our support system, we use your information to respond to your inquiries, troubleshoot issues, and follow up on feature requests or bug reports.

To Analyze and Improve Our Service

We may use aggregated, anonymized usage data to understand how features are used, identify performance issues, and improve the overall quality and reliability of the Service. We do not sell or share individual usage data with third parties for their own purposes.

To Provide You with Sponsored Content, Marketing, and Advertising

We do not currently serve third-party advertisements within the Service. If this changes in the future, we will update this policy and notify you. We may occasionally send you communications about new features, plan upgrades, or service-related announcements. You can opt out of non-essential communications at any time.

How We Share Your Information

We do not sell your personal information. We share data only with the following third-party service providers that are necessary to operate the Service:

• Clerk — handles authentication and identity management. Receives your login credentials and profile data. See Clerk's Privacy Policy.
• Supabase — hosts our PostgreSQL database where your project data, organization data, and account records are stored. See Supabase's Privacy Policy.
• Stripe — processes payments and manages subscriptions. Receives your billing information directly. See Stripe's Privacy Policy.
• MailerSend — delivers transactional and notification emails on our behalf. Receives your email address and message content. See MailerSend's Privacy Policy.
• MapTiler — provides map tile rendering. Your browser makes direct requests to MapTiler servers when viewing maps, which may include your IP address. See MapTiler's Privacy Policy.
• Vercel — hosts and deploys the application. May process server logs containing IP addresses and request metadata. See Vercel's Privacy Policy.

We may also share information if required by law, to protect our rights, or to prevent fraud or abuse.

Cookies and Local Storage

The Service uses cookies and browser local storage for authentication sessions and user preferences. We do not use tracking cookies or third-party advertising cookies. Third-party services (such as Clerk and Stripe) may set their own cookies as necessary for authentication and payment processing.

Data Retention

We retain your account and project data for as long as your account is active. If you delete your account, we will remove your personal data and project data from our systems within a reasonable timeframe. Some data may be retained in backups for a limited period or as required by law.

Data Security

We take reasonable measures to protect your information, including encryption in transit (HTTPS), database-level row-level security policies, and secure authentication practices. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your project data
• Opt out of non-essential communications

To exercise any of these rights, please contact us through the in-app support system or at the contact information below.

Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending you a notification. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your personal data, please reach out through the in-app support system or contact the Lanterne Rouge team directly.