--- title: "Privacy Policy ยท SeenLens" description: "What SeenLens collects (scanned URLs, IP addresses for rate limiting, email if given), how long we keep it, and your rights under the PDPO and GDPR." url: https://seenlens.com/privacy last_updated: 2026-11-06 --- # Your privacy at SeenLens SeenLens collects only what it needs to run scans and sell reports. That is the URL you submit, your IP address for rate limiting, the name of the site that sent you, and your email if you give it. We keep IP addresses for 30 days and scan results for 90 days, and we run no analytics or ad trackers. Last updated: 2026-11-06 ## Summary in plain words This summary repeats the main points of the sections below. - We collect the URL you submit, your IP address for rate limiting, the name of the site that sent you, and your email only if you give it. - We keep IP addresses for 30 days and scan results for 90 days. - We run no analytics or advertising trackers and we do not sell personal data. - Payment processors take your card details. We never see your full card number. - Anthropic receives the scanned page's public data to write paid-report explanations, and Google receives the scanned URL to measure page speed. Neither receives your email or IP address. - You can ask to access, correct or delete your data at [support@seenlens.com](mailto:support@seenlens.com). ## How long we keep your data | Data | How long we keep it | | --- | --- | | The page URL you submit, and the scan result | 90 days after the scan, then deleted | | Your IP address | 30 days, then deleted | | The name of the site that sent you, stored with a scan | 90 days, with the scan result | | Your email address, if you give it | As long as needed for that purpose, and no more than 2 years after our last contact | | Purchase records from our payment provider | As long as tax and accounting law requires, usually 7 years | ## Who is responsible for your data SeenLens is operated by a sole proprietor based in Hong Kong, trading as SeenLens, and decides how your personal data is used. Under the Hong Kong Personal Data (Privacy) Ordinance (PDPO) we are the data user, and under the EU and UK GDPR we are the controller. We do not publish a personal name or postal address; our legal identity is available on written request where the law requires it. Contact us about privacy at [support@seenlens.com](mailto:support@seenlens.com). ## What we collect and why | Data | Why we use it | How long we keep it | | --- | --- | --- | | The page URL you submit | To run the scan and show you the result | 90 days, with the scan result | | Scan results: what SeenLensBot fetched from that page and site, the checks and the scores | To show the report and, for paid reports, the PDF | 90 days after the scan, then deleted | | Your IP address | To rate-limit scans and stop abuse | 30 days, then deleted | | The name of the site that sent you (for example chatgpt.com) or the utm_source tag of the link you followed. Only the site name, never the full address of the page you came from | To count which sites send visitors who run scans | 90 days, with the scan result | | Your email address, only if you give it (for example to receive a report or when you email support) | To deliver what you asked for and to answer you | As long as needed for that purpose, and no more than 2 years after our last contact | | Purchase records from our payment provider: name, email, country, amount and date | To deliver the report, handle refunds and keep tax records | As long as tax and accounting law requires, usually 7 years | We do not ask for your name to run a scan and we do not build profiles. Scan results describe a web page, not you, but a URL can contain personal data, so we treat it with the same care. Anyone with the link to a scan can view its result. Scan links are not listed anywhere on our site, and scan pages tell search engines not to index them. Do not share a scan link if you want the result kept private. ## Payments Checkout runs in one of two ways, and the checkout page names the seller: either Stripe processes the payment and SeenLens is the seller on your receipt, or the report is sold by our merchant of record partner (Paddle.com Market Ltd or Dodo Payments), which then takes the payment, issues the receipt, collects sales tax or VAT where required and processes refunds on our behalf. In both cases the payment processor collects your payment details directly and processes them under its own privacy policy. We never receive your full card number. We receive the purchase record listed above so we can deliver the report and handle refunds. ## Cookies and tracking SeenLens sets no cookies of its own and runs no analytics, advertising or tracking scripts. The scan form uses Cloudflare Turnstile to tell people from bots. Turnstile may set a cookie or read technical signals from your browser for that purpose only; Cloudflare's privacy policy covers that processing. To count which sites send visitors, the site keeps the name of the site that sent you in your browser's session storage until you close the tab, and sends it with a scan you start. It is not a cookie and we share it with no one. If we ever add analytics, we will update this page before we do. ## Who we share data with We do not sell personal data. We share it only with service providers that help us run SeenLens, and only what each one needs: - our hosting and database providers, which store the service and its data; - Cloudflare, for the Turnstile bot check; - Google (PageSpeed Insights API), which measures page speed and Core Web Vitals. It receives the URL of the page being scanned; - Anthropic (Claude API), which writes the explanations and action plan in paid reports. It receives the public data we collected from the scanned page, such as its URL, title, headings and structured data types, and the list of issues found. It never receives your email or IP address; - our payment processor (Stripe) or merchant of record partner (Paddle or Dodo Payments) for purchases and refunds; - our email provider, for support emails and report delivery. These providers may process data outside Hong Kong and outside your country. Where the GDPR applies, we rely on adequacy decisions or standard contractual clauses for those transfers. We may also disclose data when the law requires it. ## Legal bases under the GDPR - **Contract:** to deliver a report you bought and handle refunds. - **Legitimate interests:** to run free scans, prevent abuse with rate limits and keep the service secure. - **Legal obligation:** to keep tax and accounting records. - **Consent:** where we ask for it, such as an optional email. You can withdraw consent at any time. ## Your rights Under the Hong Kong PDPO you can ask whether we hold personal data about you, ask for a copy of it, and ask us to correct it. We answer data access and correction requests within 40 days. You can also complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong. If the EU or UK GDPR applies to you, you also have the right to erasure, to restrict or object to processing, to data portability and to withdraw consent. We answer within one month. You can complain to the data protection authority where you live or work. To use any of these rights, email [support@seenlens.com](mailto:support@seenlens.com) with the scan link or email address the data is tied to. We may ask you to confirm that the data is yours before we act. There is no fee for reasonable requests. ## Security We use HTTPS for all traffic, limit access to production data to the operator, and delete data on the schedule above. No system is perfectly secure; if a breach affects your personal data, we will tell you and the relevant authority as the law requires. ## Children SeenLens is a tool for website owners and is not meant for children under 16. We do not knowingly collect their personal data. ## Changes to this policy We will update this page when our data practices change and show the new date at the top. See also the [Terms of Service](https://seenlens.com/terms) and the [refund policy](https://seenlens.com/refund-policy).