Privacy Policy

Last updated: March 14, 2026

Trenlens ("we", "our", "us") operates trenlens.com. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Data Type	When Collected	Purpose
Email & name	Account registration	Authentication, profile display
OAuth profile	Google/GitHub sign-in	Account creation, avatar
IP address (hashed)	Every page visit	Analytics, rate limiting, abuse prevention. We store a one-way SHA-256 hash — your raw IP is never saved.
Page visits	Automatic (every page load)	Anonymous visit counting. We record the page path, hashed IP, country (from Cloudflare headers), and browser user agent. No cookies are used.
Comments & likes	User action	Community features

2. Cookies

We use three categories of cookies:

Category	Purpose	Examples	Consent Required?
Essential	Login sessions, CSRF protection	Session JWT, CSRF token	No (legally exempt)
Analytics	Understand how visitors use the site	Cloudflare Web Analytics (no cookies)	Not currently needed
Marketing	Serve relevant ads via Google AdSense	_gads, _gid, IDE, NID	Yes — blocked until you accept

You can change your cookie preferences at any time via the "Cookie Settings" link in the footer. Marketing cookies are managed by Cloudflare Zaraz and never load until you grant consent.

3. How We Use Your Data

• Provide and maintain the Trenlens platform
• Authenticate your identity and manage sessions
• Display your comments, likes, and profile
• Serve contextual or personalized advertisements (with consent)
• Prevent abuse and enforce rate limits
• Improve content and user experience via aggregated analytics

4. Third-Party Services

• Cloudflare — CDN, Workers hosting, D1 database, Web Analytics, Zaraz consent manager
• Google AdSense — Advertising (loads only after marketing consent)
• Google OAuth — Sign-in provider

Each third party operates under its own privacy policy. We do not sell your personal data.

5. Data Storage & Security

Your data is stored in Cloudflare D1 (SQLite) and R2 (media files), both encrypted at rest. Passwords are hashed with bcrypt. API keys and IP addresses are SHA-256 hashed — we never store raw IP addresses. All traffic is served over HTTPS.

6. Your Rights (GDPR / CCPA)

You have the right to:

• Access — Request a copy of all data we hold about you
• Rectify — Correct inaccurate personal data
• Delete — Request permanent deletion of your account and data
• Portability — Receive your data in a machine-readable format
• Object — Opt out of marketing cookies at any time

To exercise any of these rights, email privacy@trenlens.com. We will respond within 30 days.

7. Data Retention

• Account data: retained until you delete your account
• Comments: retained until deleted by you or a moderator
• Server logs: retained for 30 days
• Consent preferences: retained for 12 months

8. Children's Privacy

Trenlens is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@trenlens.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of Trenlens after changes constitutes acceptance.

10. Contact

For privacy-related inquiries:

• Email: privacy@trenlens.com

← Back to Trenlens