Privacy Policy

Last updated 1 September 2026. This page explains what Lanternbox Labs GmbH does with your data.

Who we are

Lanternbox Labs GmbH, Ridlerstraße 31, 80339 München, Germany. Data protection contact: dpo@lanternbox.link.

What we store

The photos and videos you choose to back up, and the data needed to run the account: your email, plan, device names and storage used. We do not sell data, show ads, or use your library to train software.

Encryption

Files are encrypted in transit with TLS and on disk with AES-256. With end-to-end mode on, files are encrypted with keys made on your device, so we hold only the encrypted data and cannot read your library.

Legal basis

We process your data to provide the service you signed up for (Art. 6(1)(b) GDPR) and, for security logs, on the basis of our legitimate interest in keeping the service safe (Art. 6(1)(f)).

Retention

Your files stay until you delete them or close the account. Deleted items are held in trash for 30 days and then removed from all regions. Security logs are kept for 90 days.

Your rights

You can view, export, correct or delete your data from the app or by writing to us. You can also complain to a supervisory authority, which for us is the Bavarian data protection authority (BayLDA).

Security reports

If you find a vulnerability, please report it to security@lanternbox.link. Our machine-readable policy is at /.well-known/security.txt. We aim to reply within two business days.