Privacy Policy

Last updated: March 14, 2026

Trenlens ("we", "our", "us") operates trenlens.com. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Data TypeWhen CollectedPurpose
Email & nameAccount registrationAuthentication, profile display
OAuth profileGoogle/GitHub sign-inAccount creation, avatar
IP address (hashed)Every page visitAnalytics, rate limiting, abuse prevention. We store a one-way SHA-256 hash — your raw IP is never saved.
Page visitsAutomatic (every page load)Anonymous visit counting. We record the page path, hashed IP, country (from Cloudflare headers), and browser user agent. No cookies are used.
Reading engagement (scroll depth, time on page)While reading an article (Analytics consent only)Measured in your browser to decide whether an article was genuinely read; only the resulting "read" event is stored — raw measurements never leave your device.
Reading history, likes, saves & chosen topicsSigned-in activity / your topic picksYour reading list features; used for the personalized "For You" feed ONLY with your Personalization consent. First-party only — never sold or shared, not used for ads. Withdraw anytime via Cookie Settings or Account Settings → Manage Preferences.
Comments & likesUser actionCommunity features

2. Cookies

We use three categories of cookies:

CategoryPurposeExamplesConsent Required?
EssentialLogin sessions, CSRF protectionSession JWT, CSRF tokenNo (legally exempt)
AnalyticsFirst-party usage statistics (pages visited, article reads; hashed IPs, no third parties)Session token (sessionStorage)Yes — off until you opt in
PersonalizationThe "For You" feed learns from what you read, like, and save on TrenLens. First-party only — never shared or sold, not used for ads.First-party onlyYes — off until you opt in
MarketingServe relevant ads via Google AdSense_gads, _gid, IDE, NIDYes — blocked until you accept

You can change your cookie preferences at any time via the "Cookie Settings" link in the footer. Marketing cookies are managed by Cloudflare Zaraz and never load until you grant consent.

3. How We Use Your Data

4. Third-Party Services

Each third party operates under its own privacy policy. We do not sell your personal data.

5. Data Storage & Security

Your data is stored in Cloudflare D1 (SQLite) and R2 (media files), both encrypted at rest. Passwords are hashed with bcrypt. API keys and IP addresses are SHA-256 hashed — we never store raw IP addresses. All traffic is served over HTTPS.

6. Your Rights (GDPR / CCPA)

You have the right to:

To exercise any of these rights, email privacy@trenlens.com. We will respond within 30 days.

7. Data Retention

8. Children's Privacy

Trenlens is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@trenlens.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of Trenlens after changes constitutes acceptance.

10. Contact

For privacy-related inquiries:

← Back to Trenlens