Privacy notice
Last updated: 2026-04-22 · Effective on use.
Lens is the consumer's independent shopping agent. This page describes exactly what data Lens processes, where it goes, and how to delete it. It is written to be readable, not to obscure.
1. The honest version
When you use Lens, the text or image you submit is transmitted to two third parties: Cloudflare (the hosting provider running the API Worker) and Anthropic (the maker of the Claude Opus 4.7 model that powers the audit). For the cross-model comparison panel, text is also sent to one or more of: OpenAI, Google AI, OpenRouter. Each of these vendors has its own data retention policy.
Lens itself stores nothing about you on its server. Your preference profiles and audit history live
in your browser (localStorage). Clearing browser data wipes everything.
2. What's processed and where it goes
| Data | Where it goes | Why | Retention |
|---|---|---|---|
| Query text or pasted AI answer | Cloudflare → Anthropic (Opus 4.7) | Extract intent + verify claims | Cloudflare logs may retain request metadata up to 7 days; Anthropic per their data-use policy |
| Product URL | Cloudflare Worker fetches the URL | Parse the product page | Same as above; original site sees Cloudflare's IP |
| Photo / screenshot upload | Cloudflare → Anthropic vision API | Identify product from image | Same as above; image is base64'd in transit |
| Cross-model fan-out text | OpenAI, Google AI, OpenRouter (whichever keys are configured) | Get other-model picks for disagreement panel | Each vendor's policy; we do not send your IP |
| Preference profile (criteria + weights per category) | Your browser localStorage | Save criteria across sessions | Until you clear browser data or click "Clear all" in the dashboard |
| Audit history (last 50) | Your browser localStorage | Compute welfare-delta over time | Until you clear browser data or click "Clear all" in the dashboard |
3. What Lens does NOT do
- No tracking pixels, no analytics SDKs (Google Analytics, Segment, Mixpanel, etc.).
- No cookies beyond browser-essential storage.
- No ad networks, no affiliate redirects that affect ranking.
- No selling or sharing your personal information.
- No telemetry on which products you audit, beyond what Cloudflare's basic Worker logs capture.
- No accounts, no email collection, no payment information collected (Lens is free).
4. Your rights
Because Lens stores nothing on its own servers, most data-subject requests resolve to "clear your browser data." Specifically:
- Right to know: See the table above. Your localStorage is inspectable in any
browser's DevTools (Application → Storage → Local Storage →
lens-b1h.pages.dev). - Right to delete: Use the "Clear all" button in the dashboard's preferences card, or clear browser data for this origin. To request deletion of any logs Cloudflare or Anthropic may retain, see their respective privacy notices.
- Right to portability: Use the "Export profile JSON" button.
5. Disclosed sub-processors
- Cloudflare (Workers, Pages) — policy
- Anthropic (Claude Opus 4.7 API) — policy
- OpenAI (cross-model panel) — policy
- Google AI (cross-model panel) — policy
- OpenRouter (cross-model panel) — policy
6. Source code
Lens is open source under MIT. Verify everything on this page yourself: github.com/FelipeMAffonso/lens.
7. Changes to this notice
If the data flow changes, the dated header above moves and a note will be added to the README changelog. There is no email list to notify because Lens does not collect emails.
8. Contact
File an issue on GitHub or reach the author through the academic affiliation listed in the README.