Last updated: September 3, 2026
This Privacy Policy explains how StepX LLC ("StepX," "we," "us," or "our") collects, uses, and shares information when you use our website (stepxgames.com), our mobile applications Imposter X and LANTERN (each an "App," together the "Apps"), and our social media profiles. Both Apps are built to run without an account and without a server of our own, and we collect as little information as possible.
The business responsible for the information described in this policy is StepX LLC, 9164 NW 39th Street, Coral Springs, FL 33065, United States. You can reach us at [email protected].
Neither App requires an account. We do not ask for your name, email address, or phone number to play. In Imposter X, player names and any text you enter during setup are stored only on your device for the current game and are never transmitted to us. In LANTERN, your progress — runs, unlocks, currency, and settings — is stored only on your device; we cannot see it, and it is deleted when you delete the App. If you contact us (for example, by email), we receive the information you choose to provide.
All purchases are processed by the app store you bought through — Apple's App Store or Google Play. That includes the Imposter X Pro subscription and LANTERN's in-game currency packs. We receive confirmation that a purchase occurred, so the App can deliver what you bought, but never your payment card details. For LANTERN, purchase confirmations are verified through RevenueCat, which receives an anonymous app identifier and the store's purchase receipt for that purpose.
Advertising is provided by Google AdMob (Google LLC and Google Ireland Limited). In Imposter X, the free version may display ads. In LANTERN, ads are rewarded videos that you choose to watch in exchange for in-game currency; nothing in the game requires watching one. These partners may use a device advertising identifier to serve and measure ads.
For more information, see Google's Privacy Policy at https://policies.google.com/privacy.
Our Apps are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). Where required, we configure advertising to be non-personalized for users who may be children. If you believe a child has provided us personal information, contact us at [email protected] and we will delete it.
We do not sell your personal information. We share information only with the service providers who help us operate (listed below), or where required by law, or to protect our rights and the safety of users.
Each provider processes data under its own privacy policy.
We keep information only as long as needed for the purposes described above or as required by law (for example, tax or accounting records). Website server logs are deleted within 14 days. On-device game data is removed when you delete the App. Purchase records held by the app stores and RevenueCat are kept for as long as needed to honor your purchases and meet legal obligations.
We use reasonable technical and organizational measures to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If you are a California resident, you may request access to or deletion of your personal information and may opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. We will not discriminate against you for exercising these rights. To make a request, email [email protected].
If you are in the European Economic Area or the UK, you have the rights of access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw consent at any time. The legal bases we rely on are performance of a contract, your consent (e.g., for advertising where required), our legitimate interests (e.g., security and improving our Apps), and compliance with legal obligations. You may also lodge a complaint with your local data protection authority. To exercise any right, email [email protected].
We are based in the United States, and our service providers may process data in the United States and other countries. Where data is transferred from the EEA or UK, our key providers (Apple, Google, and Cloudflare) are certified under the EU-US Data Privacy Framework or rely on Standard Contractual Clauses to protect the transfer.
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent version, which is always available on this page.
If you have any questions about this Privacy Policy, contact StepX LLC at [email protected].