Skip to content
lantria

Privacy Policy

Last updated June 2026

1. Who we are

This Privacy Policy applies to the lantria landing page at https://lantria.app (“the Site”). The Site is a promotional page for the lantria application, which is not yet launched. When this policy refers to “lantria,” “we,” “us,” or “our,” it refers to the operator of the Site.

We are committed to protecting your personal data and respecting your privacy. This policy explains what data we collect, why we collect it, how we use it, and your rights under applicable data protection laws.

2. What this policy covers

This policy covers the lantria landing page only. Once the lantria application launches, a separate privacy policy will apply to the application itself. This policy does not cover any third-party services, websites, or applications that you may access through links on the Site.

3. Data we collect

We collect and process the following categories of personal data through the Site:

3.1 Information you provide directly

  • Email address — When you join the waitlist, we collect your email address and the timestamp of your signup.
  • Consent record — We store a record of your consent to receive emails and your acceptance of this Privacy Policy, including the consent version and timestamp.
  • UTM parameters — If you arrive via a link containing UTM parameters (utm_source, utm_medium, utm_campaign), we capture those to understand which channels drive interest.

3.2 Information collected automatically

  • Analytics data — If you consent to analytics cookies, we use Google Analytics, Microsoft Clarity, and Vercel Analytics to collect anonymized usage data, including pages visited, time on site, referring URLs, device type, browser type, and general geographic location (country/city level). Google Analytics anonymizes IP addresses before storage.
  • Cookie preferences — We store your cookie consent choice in your browser's localStorage so we can respect your preferences on return visits.

3.3 Information we do NOT collect

  • Full IP addresses (IP anonymization is enabled in Google Analytics).
  • Precise geolocation data.
  • Payment information.
  • Any data from the lantria application itself (it has not launched).
  • Special category data (race, religion, health, biometrics, etc.).

4. Legal basis for processing

We process your personal data under the following legal bases, depending on the type of data and your jurisdiction:

  • Consent (GDPR Art. 6(1)(a)) — You explicitly consent when you submit your email via the waitlist form (with a checkbox confirming you accept this Privacy Policy). You explicitly consent to analytics cookies via the cookie consent banner.
  • Legitimate interest (GDPR Art. 6(1)(f)) — We have a legitimate interest in understanding aggregated, anonymized usage patterns to improve the Site. For visitors who choose “Essential only” cookies, no analytics scripts are loaded.

Where consent is the legal basis, you have the right to withdraw it at any time (see Section 9).

5. How we use your data

We use the data we collect for the following purposes:

  • To send you early access updates about the lantria app (email only).
  • To understand which marketing channels are effective (UTM parameters).
  • To analyze aggregated, anonymized usage of the Site (analytics, only with your consent).
  • To maintain a record of your consent.
  • To improve the Site experience.

We will never sell, rent, or trade your personal data to third parties for their marketing purposes.

6. How we store your data

6.1 Waitlist data (email, consent)

Waitlist signup data is stored in Supabase, a cloud database service that acts as our data subprocessor. Supabase infrastructure is hosted in the United States and is covered by EU Standard Contractual Clauses (SCCs). See Supabase's Privacy Policy.

6.2 Analytics data

Analytics data is processed by:

  • Google Analytics — Data is stored on Google servers globally. Google is certified under the EU-U.S. Data Privacy Framework (DPF) and UK Extension to the DPF. See Google's data practices.
  • Microsoft Clarity — Data is stored on Microsoft servers. Microsoft is certified under the EU-U.S. DPF. See Microsoft Clarity data handling.
  • Vercel Analytics — Lightweight, privacy-focused analytics provided by Vercel Inc. Data is processed on Vercel's global edge network. Vercel does not set tracking cookies and does not store IP addresses. See Vercel Analytics documentation.

Both services are configured to respect privacy: IP anonymization is enabled, and we do not send any personally identifiable information (PII) to them.

6.3 Data retention

  • Waitlist emails — Stored until you request deletion, or until the lantria app launches and a full privacy policy for the app supersedes this one.
  • Analytics data — Google Analytics retains data for 26 months by default. Microsoft Clarity retains data for up to 12 months.
  • Cookie consent records — Stored in your browser's localStorage (not on our servers). You can clear this at any time via your browser settings.

7. International data transfers

lantria operates from Canada and serves users worldwide. The personal data we collect may be transferred to, stored, and processed in countries outside your country of residence, including the United States (where Supabase, Google, and Microsoft are based) and Canada.

For transfers from the EU/EEA, UK, or Switzerland, we rely on:

  • EU-U.S. Data Privacy Framework (DPF) — Google and Microsoft are DPF-certified.
  • Standard Contractual Clauses (SCCs) — Supabase provides EU SCCs for data transfers.
  • Adequacy decisions — Canada is recognized by the EU as providing an adequate level of data protection for commercial organizations under PIPEDA.

8. Cookies and similar technologies

The Site uses a cookie consent banner that lets you choose between two options:

  • Accept all — Loads Google Analytics and Microsoft Clarity scripts, which set first-party and third-party cookies for analytics purposes.
  • Essential only — No analytics cookies are set. The only data stored is your consent preference in localStorage, which is strictly necessary for the Site to remember your choice.

No cookies of any kind are set before you make a choice on the consent banner. The analytics scripts are only loaded after you click “Accept all.”

You can also control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that clearing your localStorage will reset your consent preference and the consent banner will reappear.

9. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 GDPR (EU/EEA) and UK GDPR

  • Right of access — You can request a copy of the personal data we hold about you.
  • Right to rectification — You can ask us to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) — You can ask us to delete your personal data.
  • Right to restrict processing — You can ask us to limit how we use your data.
  • Right to data portability — You can request your data in a structured, machine-readable format.
  • Right to object — You can object to processing based on legitimate interests.
  • Right to withdraw consent — You can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
  • Right to lodge a complaint — You have the right to complain to a supervisory authority in your EU member state, or the UK Information Commissioner's Office (ICO).

9.2 CCPA / CPRA (California, USA)

  • Right to know — You can request disclosure of the categories and specific pieces of personal data we have collected about you in the past 12 months.
  • Right to delete — You can request deletion of your personal data, subject to certain exceptions.
  • Right to opt out of sale/sharing — We do not sell or share personal data as defined under the CCPA. We do not engage in cross-context behavioral advertising.
  • Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, contact us at the email address in Section 13. We will verify your identity before processing your request and respond within the timeframe required by applicable law (typically 30 days under GDPR, 45 days under CCPA).

10. Children's privacy

The Site is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

  • HTTPS encryption for all data in transit.
  • Supabase provides encryption at rest, Row-Level Security (RLS), and access controls for database storage.
  • Access to waitlist data is restricted to the lantria team on a need-to-know basis.
  • No personal data is sent to analytics providers (only anonymized usage data).

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If the changes are material, we will notify waitlist subscribers via email. We encourage you to review this policy periodically.

13. Contact us

For questions about this Privacy Policy, or to exercise your data rights, contact us at:

Email: privacy@lantria.app

Website: https://lantria.app

14. Supervisory authority

If you are in the EU/EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu.

If you are in the United Kingdom, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk.