Privacy Policy
Last updated: April 8, 2026
Who we are
Lanlan ("we", "us", "our") is an AI-native website builder. Our website is lanlan.site and our dashboard is at app.lanlan.site.
What data we collect
Account information
When you sign up, we collect your email address. This is used for authentication (magic link login), transactional emails (domain setup, team invitations), and billing communications. We do not collect your name, address, or phone number.
Site content
Files you upload or create through Lanlan (HTML, CSS, images, etc.) are stored in Cloudflare R2. These files are the content of your websites and are accessible at your site's public URL.
Analytics
We use PostHog for product analytics. We track usage events (tool calls, page views, feature usage) tied to your anonymous user ID. We do not send your email address or other personally identifiable information to PostHog. PostHog may set cookies for session tracking on the dashboard.
Site visitor analytics
If you use Lanlan's built-in analytics, we collect aggregated, anonymous data about visitors to your sites: page views, referrers, countries (derived from IP), and device types. Visitor IP addresses are hashed and never stored in raw form. No cookies are set on your visitors.
Form submissions
If you add contact forms to your site, submission data is stored in our database and forwarded to your notification email. IP addresses of form submitters are hashed for spam prevention and never stored raw.
Payment information
Payments are processed by Stripe. We do not store credit card numbers. Stripe collects payment details directly. We store your Stripe customer ID and subscription status in our database.
Domain registration
If you purchase a domain through Lanlan, we register it on your behalf via Cloudflare Registrar, an ICANN-accredited domain registrar. The following applies:
- WHOIS privacy: WHOIS privacy protection is enabled by default on all domains registered through Lanlan.
- Data sent to Cloudflare Registrar: The domain name you purchase and DNS record configurations. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
- ICANN requirements: Domain registrations are subject to ICANN policies. See ICANN Registrant Rights & Responsibilities.
- Cloudflare is the sponsoring registrar for all domains purchased through Lanlan.
Third-party services
We share data with the following services to operate Lanlan:
- Cloudflare (hosting, CDN, DNS, database, domain registration) — your site files, database records, request metadata, and domain registration data
- Stripe (payments) — your email address and payment details
- Resend (transactional email) — your email address and email content
- PostHog (product analytics) — anonymous usage events, no PII
- Unsplash (stock photos) — search queries when you use the image search feature
How we use your data
- To provide and maintain the Lanlan service
- To authenticate you and secure your account
- To process payments and manage subscriptions
- To register and manage domains on your behalf
- To send transactional emails (login links, domain setup, expiration reminders)
- To improve the product based on aggregate usage patterns
We do not sell your data. We do not use your data for advertising. We do not train AI models on your site content.
Data retention
- Account data: Retained while your account is active. Deleted upon request.
- Site content: Stored in R2 while the site exists. Deleted when you delete the site.
- Analytics events: Retained in PostHog per their retention policy.
- Domain registrations: Records retained for the life of the domain registration.
Your rights
You can:
- Access your data by logging into the dashboard
- Delete your account and all associated data by contacting support@lanlan.site
- Export your site files at any time through the dashboard or API
- Inquire about what personal data we hold by emailing support@lanlan.site
Cookies
We use essential cookies for authentication (session cookies on the dashboard). PostHog may set analytics cookies. We do not use advertising or third-party tracking cookies. Your published sites do not set any cookies unless you add them yourself.
Security
Data is encrypted in transit (HTTPS everywhere) and at rest (Cloudflare infrastructure). Authentication uses magic links — no passwords are stored. OAuth tokens are stored securely in our database.
Children
Lanlan is not directed at children under 13. We do not knowingly collect data from children.
Changes
We may update this policy. Material changes will be communicated via email or dashboard notification.
Contact
Questions about privacy? Email support@lanlan.site.