Lander is designed to keep your browsing private.

In short

Lander does not sell your data or use advertising trackers. The app communicates with Reddit, media providers, optional iCloud services, and the routing and diagnostic services described below. Diagnostics use a random installation identifier, are enabled by default, and can be turned off in Settings.

What diagnostics do not include

• Personal information such as name, email, or phone number.
• Browsing history or reading habits for analytics or advertising.
• Location data or advertising identifiers.
• Your Reddit password.

Local data and optional sync

• Your Reddit session is stored securely in Keychain and used to authenticate requests. Optional account routing also sends it through the gateway, as explained below.
• App preferences such as themes, gestures, and settings.
• Temporary image and media cache used to speed up browsing.
• Optional iCloud-backed settings sync if you enable it.

Optional data collection

The diagnostic switch controls crash reports and limited usage events. It is labeled Diagnostics & Analytics on iPhone and iPad, and Crash Reporting in Lander Vision. It is enabled by default. Turning it off stops this reporting; it does not erase reports already received.

How information is used

• Your stored session is used only to authenticate you with Reddit.
• Settings are used only to personalize your app experience.
• Cached media is used only to improve performance and reduce repeat loading.
• Optional diagnostics, when enabled, are used only to find bugs and understand which features are used — never to profile you or what you read.

Third-party services and optional flows

Reddit

You sign in on Reddit’s own web page. Lander does not collect or store your Reddit password. The resulting session is kept in Keychain and used to act on your behalf. Account requests normally go directly to Reddit; enabling account routing also exposes the session and request content to the gateway. Your Reddit activity remains subject to Reddit’s policies.

iCloud

If you enable settings sync, that data is stored in your personal iCloud account. It is encrypted by Apple and not accessible to Lander.

Crash reports — Sentry

When diagnostics are enabled, Sentry processes crash information to help diagnose bugs. Reports use a random installation identifier and technical information such as app and OS versions. Lander scrubs report content and disables automatic screenshots, view hierarchies and network breadcrumbs. The diagnostic setting controls whether these reports are sent.

Usage diagnostics — Lander-operated

The same setting controls limited usage events sent to Lander-operated infrastructure: for example, which features are used and technical success or failure categories. These events use a random installation identifier, not your Reddit account ID. They exclude post content, usernames, search queries and browsing history. The ingestion service uses network addresses for transient rate limiting rather than storing them alongside usage events. The identifier makes these reports pseudonymous, not fully anonymous.

Optional account routing

On iPhone and iPad, “Route my account too” is off by default. If you enable it, the gateway receives your Reddit session credential and request content, including messages, to send those requests to Reddit. This hides your network address from Reddit for requests that use the route, but requires trusting the gateway with account information. Lander currently operates both relay and gateway; independent, non-colluding operators provide a stronger separation. Columbia is not a VPN or a guarantee against traffic correlation.

How your traffic reaches Reddit

Columbia is enabled by default for supported public reads. It encrypts the request through a relay to a gateway; the relay sees your network address but cannot read the request, and the gateway reads the request without receiving that address from the relay. Reads can fall back to a direct connection, which exposes your address to the destination. Other requests, including media-provider traffic, may use direct connections. On iPhone and iPad, you can turn the relay off in Settings > Advanced > Columbia. Learn how Columbia works.

Data sharing and control

Lander does not sell, share, or transfer your data to third parties for marketing or profiling.

• You can clear cache or remove the app to delete locally stored data.
• You control optional features such as diagnostics and iCloud sync from Settings, at any time.
• Biometric lock is available as an extra local protection layer.

Contact

Privacy questions or requests: privacy@landerapp.xyz. The community page lists the public channels.

Age and regional notes

Lander displays user-generated content from Reddit. Check the App Store listing for the applicable age rating, and Reddit’s rules for account and content requirements.

Related pages