The short version
- We store one email address, used to sign you in and to get your account back. No service you use ever sees it, and there is no password anywhere.
- Services you connect to receive a random ID and a nickname you choose — nothing else, unless you explicitly hand it over.
- There is nowhere to enter your name, phone number or address — the app has no such fields, and the API has no way to relay them.
- There is no analytics SDK, no advertising SDK, no third-party tracker in the app. We do not profile you and we do not sell anything to anyone.
- We can see which of your identities belong to the same account. That is the one built-in limit of the design — explained below, not buried.
Who we are
Lauther is operated by Dipling, Hungary. For any privacy question, or to exercise the rights listed below, contact hello@lauther.id. Under the GDPR we are the data controller for the data described here.
What we store, and why
| Data | Why | Where |
|---|---|---|
| Email address | Sign-in and account recovery — so losing your phone doesn't lose your identities. There is no password. Never shared with any service. | Firebase Authentication (EU) |
| Your notification inbox | So messages survive being dismissed and are readable on your other devices. | Firestore (europe-west1) |
| Connected services | The per-service ID, the alias you chose, and the push credential — this is what lets you revoke a service later. | Firestore (europe-west1) |
| Device push tokens | The address Google/Apple use to wake your phone. Deleted automatically when a device stops responding. | Firestore + FCM/APNs |
| Email aliases | Only if you create them. Maps a throwaway address to your inbox. | Firestore (europe-west1) |
What never reaches our servers
- Your name, phone number and postal address. The app has nowhere to enter them and the API has no field that could carry them. A service that needs such details has to ask you on its own site, under its own privacy policy.
- Your fingerprint or face. Biometric checks happen entirely in the operating system. We receive a yes or a no, nothing more.
- Any advertising or analytics identifier. The app ships with no such SDK.
What a service learns about you
When you sign in to a website with Lauther, that website receives:
- A pairwise identifier (
lid_…) generated only for them — a different one from every other service. - The alias you picked for them, for example
@quiet-fox. - A push credential, if you granted notifications, so they can message you until you revoke it.
That is the complete list.
What we can see — stated plainly
Lauther itself can tell which identities belong to the same account. Our servers hold the link between your account and each pairwise identity, because that is what makes one-tap revocation, account recovery and multi-device sync possible.
So the accurate claim is pairwise pseudonymity toward the services you use — not anonymity from us. Notification content passes through our infrastructure encrypted in transit (TLS) but is not end-to-end encrypted today; end-to-end encrypted payloads are on the roadmap. If your threat model includes us, or a party who can compel us, please plan accordingly.
We also record ordinary operational data — timestamps, delivery counts and error logs — to keep the service running and to stop abuse. These are kept for as long as needed to operate the service and then discarded.
Who we share data with
We do not sell data, and we do not share it for advertising. We use these processors to run the service:
- Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging) — hosting, storage and push delivery. Our data is held in the
europe-west1region. - Apple Push Notification service — delivery to iOS devices only.
- Cloudflare — DNS, and inbound mail routing if you use email aliases.
Push notifications necessarily transit Google's or Apple's delivery network to reach your device; that is true of every app on your phone. We may also disclose data where we are legally required to.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. Most of this you can do yourself, immediately, without asking us:
- Revoke a service — burns its identity, alias and push channel at once.
- Delete notifications — individually or all at once, from the inbox.
- Delete an email alias — mail to it stops arriving instantly.
- Delete your whole account — write to hello@lauther.id and we erase it.
Deleting your account removes your inbox, your connected services and your identities from the live database. You also have the right to complain to your local supervisory authority — in Hungary, the NAIH.
Children
Lauther is not directed at children under 16 and we do not knowingly collect their data.
Changes
If this policy changes in a way that materially affects you, we will say so in the app rather than quietly editing this page. The date at the top always reflects the current version.