Lantern

Lantern's default Smart Routing sends blocked or unencrypted sites through its network and leaves other traffic direct. Full Tunnel changes that scope, while separate split-tunnel rules let selected apps or websites bypass the connection. Read those settings together before assuming that switching Lantern on routes every request the same way.

Private Server is another documented path: connect through a server you operate and share its key with trusted people. Lantern says that feature itself is free, with hosting paid separately. The managed free offer needs no account, while Pro is an optional upgrade with features including DNS-based ad blocking. Legacy macOS builds listed for older systems no longer receive updates.

Lantern's policy excludes browsing, DNS and user-linked connection logs while describing random device IDs and fuzzed aggregate usage for service operation. Pro accounts keep account and subscription information; optional crash reports use a separate diagnostic process. Inactive support queries in Freshdesk are deleted after twenty-one days under the policy. A private server introduces its operator's own handling of records alongside those managed-service provisions.