Chrome Extension Privacy Policy

Overview

The New Lantern Chrome Extension (“Extension”) is a workspace management tool for customers using the New Lantern radiology platform. This policy describes what data the Extension collects, how it is used, and with whom it is shared.

1. Who this policy applies to

This Extension is intended for use exclusively by authorized users of New Lantern customers. It is not intended for general public use.

2. Data we collect

2.1 User identity information

When you sign into the New Lantern platform, the web application passes user identity information (name, email, user ID) to the Extension for logging purposes. This information is stored locally in Chrome’s extension storage and sent to our logging service.

2.2 Extension installation identifier

A randomly generated UUID is created on first installation and persists across browser sessions. This is used to correlate diagnostic logs from a single installation.

2.3 Display and window configuration

The Extension reads your monitor hardware configuration, including:

• Number of connected displays

• Screen resolution, work area dimensions, and positions

• Display zoom factors

A fingerprint of your display setup is stored locally and included in diagnostic logs to support multi-monitor layout management.

2.4 Application window state

The Extension tracks which New Lantern application windows are open and their positions, including:

• Window URLs

• Window dimensions and screen coordinates

• Window focus and lifecycle events

2.5 Diagnostic and error logs

Console errors, warnings, and extension events generated by the Extension are automatically collected for debugging and service quality purposes.

3. How we use this data

4. Data retention

• Datadog diagnostic logs: retained for 15 days.

• Local extension storage (Chrome storage): retained until cleared by the browser profile, by extension reset/reinstall, or by extension removal.

5. Data sharing

We do not sell your data. We share data only with Datadog for diagnostic logging and error monitoring (sub-processor under BAA).

We do not share extension-collected telemetry with advertising networks or data brokers.

6. HIPAA considerations

This Extension is designed not to intentionally collect Protected Health Information (PHI). It does not read or modify healthcare API request or response bodies.

New Lantern is a platform serving covered entities and their staff. New Lantern maintains Business Associate Agreements (BAA) with applicable sub-processors to the extent required by HIPAA.

7. Technical details

7.1 Diagnostic logging via Datadog

The Extension uses Datadog for log collection and error monitoring. Logs may include user identity information, installation ID, extension version, window URLs, display configuration fingerprints, and error stack traces.

7.2 Network request header modification

When a New Lantern user makes requests to the Google Healthcare API, the Extension injects a Timing-Allow-Origin response header. This allows the New Lantern web application to measure healthcare API network performance using the browser’s Resource Timing API. The Extension does not read or modify healthcare API request or response bodies, and no clinical data is accessed through this mechanism. This header injection applies only to requests initiated from New Lantern domains.

8. Your choices and requests

This Extension is provided for authorized users of New Lantern customer organizations. Privacy requests (including access, correction, or deletion requests) may be handled by your organization administrator and/or New Lantern depending on account ownership and applicable law.

You can contact New Lantern using the details below for questions about this policy or data handling.

9. Contact

For questions about this privacy policy or data handling, contact support@newlantern.ai.