Lanternwild
Privacy policy
Last updated 25 October 2026
The short version
- We only collect what the game needs: your handle, your password (scrambled so nobody can read it) and your game progress.
- We never ask for your real name, email address, phone number, photo or where you live.
- There are no adverts and no tracking, and we never sell anyone's information.
- Your profile is private unless you choose to make it public. Even then, people only see your handle and the cards you can swap.
- You can download everything we hold about you, or delete your account, from your Profile page at any time.
- Under 13? Please ask a parent or guardian to read this with you.
1. Who we are
Lanternwild (playlanternwild.com) is run by Christchurch Web Solutions Ltd (company number 10977032), which trades as Lanternwild, of Unit 6, 6 Silver Business Park, Airfield Way, Christchurch, BH23 3TA, United Kingdom ("we", "us"). We are the controller of the personal information described here. Contact us at hello@playlanternwild.com.
2. What we collect, and why
| Information | Why we use it | Legal basis (UK/EU GDPR) |
|---|---|---|
| Your handle (the name you choose) | To identify your account and, if you make your profile public, to let others offer swaps | Contract: to provide the game |
| Your password and recovery code, stored only as one-way hashes | To let you sign in and recover your account | Contract |
| Game data: cards, packs, swaps, walks, puzzle results, dioramas, favourites, lantern light | To run the game and keep your collection safe | Contract |
| Security records: when you sign in, open packs or swap, and failed sign-in attempts | To keep accounts safe, stop cheating and fix problems | Legitimate interests (security) |
| Your IP address and browser details, used briefly and not stored in our game database | To limit repeated attempts, block bots (Cloudflare Turnstile) and deliver the site | Legitimate interests (security) |
| Purchase records (when payments are switched on): what was bought, the amount, the date and Stripe's reference numbers | To give you what you paid for, handle refunds and keep the records the law requires | Contract; legal obligation |
We do not collect your email address, real name, date of birth, location, contacts, photos, microphone or camera. We do not use advertising, analytics or tracking cookies, we do not build profiles of you, and we make no automated decisions about you with legal or similar effects.
3. Cookies and storage on your device
We use one cookie, __Host-lw, which keeps you signed in. It is strictly necessary, so it does not need consent. The game also saves a few settings in your browser, such as reduced motion, your puzzle progress and, in the offline version, your collection. None of this is used for tracking.
4. Children
Lanternwild is made to be safe for children. Following the UK Age Appropriate Design Code, privacy settings are high by default: profiles are private, there is no chat or messaging, no location, no adverts, and nothing nudges you to share more. The only thing other players can ever see is your handle and your swappable cards, and only if you turn on a public profile. Handles are checked to keep them friendly.
Children under 13 need a parent or guardian to set up and look after their account. We do not knowingly collect personal information from children under 13 beyond what the game needs to work (see section 2). Please choose a handle that is not a real name. If you are a parent or guardian and want to see, change or delete your child's information, contact us at hello@playlanternwild.com.
5. Who we share information with
We only share information with companies that help us run the game, under contracts that require them to protect it:
- Cloudflare: hosts the site and database and provides security, including Turnstile bot checks.
- Stripe: processes payments when they are switched on. Card details go straight to Stripe and never reach us.
We may also share information if the law requires it, or to protect players' safety. We never sell or rent personal information, and we do not "share" it for targeted advertising (as defined in US state laws such as the CCPA/CPRA).
6. International transfers
Cloudflare and Stripe may process information outside the UK or the European Economic Area, including in the United States. Where they do, transfers are protected by approved safeguards, such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses or adequacy decisions.
7. How long we keep information
- Account and game data: while your account exists. When you delete your account it is removed straight away from the live game, and from backups within 30 days.
- Security records: up to 12 months.
- Purchase records: 6 years, as UK tax law requires, and never used for anything else.
- Sign-in sessions end after 30 days, or when you sign out.
8. Your rights
Wherever you live, you can ask to see, correct, download or delete your information. Depending on where you live, you may also be able to restrict or object to how we use it. Downloading your data and deleting your account are both in your Profile, and work instantly. For anything else, contact hello@playlanternwild.com and we'll reply within one month.
If you're unhappy with how we've handled your information, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live. We'd appreciate the chance to put things right first.
9. Keeping information safe
Passwords and recovery codes are stored only as one-way hashes. All connections use HTTPS. Access to systems is restricted, sensitive actions are logged, and the game's code is tested and security-reviewed.
10. Changes
If we change this policy, we'll update the date at the top. If a change is important, we'll tell you in the game before it takes effect.