Palm LanternPrivacy
Your palm.
Your choice.
Scanning happens on your device. Saving to your account is a separate choice.
Last updated: 9 October 2026.
Who to contact
Palm Lantern is operated by Abolfazl Asnaghi in Sweden. Contact support@palmlantern.com about personal data, corrections, access or copyright concerns.
When you scan
After your acknowledgment, the scanner processes your selected images or video in your browser to locate the hand, reconstruct the palm and prepare a reading. This scanning flow does not send your palm images to an external AI interpretation service. Camera access is requested through your browser; the camera is stopped when you close capture.
Capture photos and reconstruction work are held in the open page. Where browser storage is available, the latest completed reading, its evidence and result images are also kept in this browser for recovery after refresh or sign-in. This copy is replaced by the next usable completed reading, or removed when you choose to clear it. It expires after 7 days and is deleted when the site next checks recovery storage. It is not uploaded by the recovery feature. Anyone using the same browser profile may reopen it, so remove it on shared devices. Storage can be unavailable or cleared by the browser; saving a report to your account is a separate action. The latest recorded video is saved in this browser’s local database so you can resume or retry. This video is not uploaded by the scanning flow. It remains until replaced, deleted using the controls below, or removed with the browser’s site data.
When you create an account or save
We store your name, email address, a derived password record and sign-in sessions to provide your account. Choosing “Download PDF” prepares a copy on your device without uploading it. When you choose “Save PDF report”, your device creates the PDF and uploads it, an associated palm image and the report text to private account storage. The PDF includes your hand image and available heat map. We also store the scan date and scanner and rulebook versions.
Our hosting and account-storage provider is Cloudflare. Saved account data and report files use the service’s configured European storage resources. Network delivery and security processing may involve Cloudflare’s international infrastructure; a European storage setting is not a promise that every technical request stays in Europe. We do not sell your palm images, publish private reports or use submitted images to train models through this service.
Share cards
Opening a share-card preview creates an image on your device from supported reading themes. Your palm photo is excluded by default and is included only if you select it. The card does not include your name or account details. Previewing does not publish or upload it. Downloading saves a copy on your device; choosing Share opens your device’s share sheet so you can choose a destination. That destination’s privacy terms then apply. Deleting your reading or account cannot recall copies you downloaded or shared.
Password recovery
When password reset email delivery is active, requesting a reset sends your account email address and a short-lived recovery link through Resend, our transactional email provider. No palm image or reading is included. Recovery links expire after 15 minutes; the database stores a hash of each token. A successful reset removes existing sign-in and recovery sessions and sends a password-change notification. Expired recovery records are unusable and are cleared on the next recovery request for that account or when the account is deleted. Recovery pages do not send optional usage analytics. If delivery has not been activated, the request page says so.
Purposes and legal grounds
Your affirmative processing choice authorises the requested on-device scan. Providing an account and privately storing a report at your request are necessary to deliver those services. Optional usage analytics relies on your separate choice. Limited technical and security processing is used to protect accounts and keep the service operating, based on those legitimate interests; we may also process data where a legal obligation requires it.
The reading does not identify you by comparing your palm against an identity database and is not used to make decisions with legal or similarly significant effects about you.
Cookies, local storage and optional analytics
A secure sign-in cookie keeps you logged in for up to 30 days or until you sign out or the session is revoked. Local video storage supports the retry feature you request. Your browser may also cache the website and scanner resources.
Optional usage analytics is off by default. If enabled through “Privacy choices” in the footer, it uses a random browser identifier and records the page path, event name and time; an event can be associated with your account when signed in. Palm images, video and reading text are not included. Disabling it stops future optional events and removes that browser identifier. It does not itself erase events already received; contact us to request deletion. Hosting/security logs are separate from optional analytics.
Your controls and withdrawal
Before capture, leave the consent boxes unchecked to decline analysis. On the capture page, “Withdraw and clear this reading” stops the flow and removes its temporary images, saved video and completed-reading recovery copy from this browser. Close any other open Palm Lantern tabs to release their temporary copies. You can also remove the locally saved video and reading recovery copy here:
Use My readings to download or delete individual reports or delete your account and its saved reports. Deleting an account does not clear browser storage on other devices or copies you downloaded or shared. To exercise access, correction, restriction, objection, portability or erasure rights where applicable, email the contact above. We may ask for information needed to verify that the request is yours.
Withdrawing consent does not affect the lawfulness of processing completed before withdrawal. You can complain to Sweden’s Authority for Privacy Protection (IMY) or your local supervisory authority.
Retention and protection
Saved readings remain while your account is active until you delete them or close the account. Deletion removes the active report and image objects and associated account records; provider recovery copies or security records can remain for their applicable retention periods or where required by law. This is not a promise of immediate deletion from every backup. Optional analytics and technical records are kept only as needed for their stated purposes; contact us for a retention or deletion request.
Private report and image requests require account access checks, and passwords are stored as derived records rather than readable text. No online system can promise absolute security. Protect your credentials and the devices where you save reports.
Changes and additional services
We will update this notice if the data flow changes. Image sharing, external AI processing, email delivery or other additional uses must be explained before they are enabled and must obtain any required separate permission. The current report-email feature is disabled.