Twenty-two hand-tuned themes
From True Black to WCAG AAA High Contrast to the full Catppuccin family. Switch the whole app in a single tap.
Private by design
The Reddit client
that can’t watch you read.
A fast, native client for iPhone and iPad. Your session stays in your Keychain, out of the box no server of ours sits between you and Reddit, and the app collects nothing to sell. No ads. No tracking. No profile of you, anywhere.
Themes
Twenty-two themes. This page is wearing one.
Every palette below is pulled straight from the app’s theme engine, contrast-audited against WCAG in the app’s own tests. Pick one and the whole site changes with you, the same way the app does.
All twenty-two, with their stories
Your pick is saved in localStorage, on your device. We never see it.
The stance
Privacy you do not have to take on faith.
Most apps ask you to trust a promise that nobody looks. Lander is built so the looking is not possible in the first place. The privacy comes from what the system is unable to see.
Your credentials stay on your device
You sign in to Reddit on Reddit's own page. Your session is held in the iOS Keychain, encrypted by the system. Lander never sees your password and never sends your credentials anywhere but Reddit.
No ads, no trackers, no profile
No third-party analytics, no advertising identifier, no shadow profile of what you read. Optional anonymous diagnostics exist, and they are off by default. The app has nothing to sell because it collects nothing to sell.
Nothing of ours in the middle
By default your device talks straight to Reddit; there is no Lander server on the path to watch it. And for anonymous reading we built Columbia, an opt-in proxy that is blind by construction. We open-sourced it so you can check the math yourself.
Columbia
No single operator ever holds both halves of you.
Columbia is the operator-blind proxy behind Lander. It splits a request into two pieces that never meet. One operator learns your address but only sealed, unreadable content. A different operator decrypts the content but never learns your address. Run them separately and nobody can rebuild your reading history, because nobody ever sees the whole of it.
Auditable. The whole proxy is open source under a noncommercial license. Read it, run it, or self-host the entire path.
Sealed end to end. Built on Oblivious HTTP and HPKE. Identity and content travel in separate trust domains.
Yours to verify. The guarantee is structural, not a pinky promise. The operator cannot look, even if asked.
Columbia ships in the app today as an opt-in for anonymous reading. The default path stays direct: your device to Reddit, nothing of ours in between.
What we keep
Almost nothing. On purpose.
The whole of what Lander touches, and where it stays.
- Your session
- Held in the iOS Keychain, used only to talk to Reddit. Never copied off your device.
- Keychain
- Your settings
- Themes, gestures, and preferences sync through your own iCloud account, encrypted by Apple and out of our reach.
- your iCloud
- Diagnostics, if you ask
- Crash reports and anonymous usage diagnostics, both behind one switch that ships off. Leave it off and nothing is ever sent.
- opt-in
- Nothing else
- No reading history for analytics, no location, no advertising identifiers, no contact list. We do not want them.
- —
The app
Every detail, hand-tuned.
Native SwiftUI on the Liquid Glass surfaces of modern iOS. Fast, gesture-driven, and built for people who actually live in their feed.
Swipe everything
Vote, reply, save, and navigate with gestures that feel physical. Tune the angles and the haptics to your hand.
Feed, comments, search, inbox
Threaded color-coded comments, scoped universal search, and a full inbox for messages, replies, and mentions.
Media, full screen
Images, galleries, GIFs, and video with sound — including imgur albums and Streamable, inline. Pinch, zoom, and scrub without leaving the app.
iPad and Apple Vision Pro
A true multi-column layout on iPad, and a separate native edition for Apple Vision Pro.
Fast, native, accessible
Native SwiftUI, tuned for 60fps and a light memory footprint. Accessible by default, not as an afterthought.
A look inside
Every screen, considered.
