Who runs this site
QualiLens is operated by Felicia Yang as an individual, who is responsible for the personal data described in this notice. QualiLens is not a registered company. Contact Felicia@qualilens.tech about privacy or personal data.
When you browse
The hosting service processes technical request information, such as your IP address, browser information, requested page and access time, to deliver the site and help detect faults or abuse. This site does not include advertising pixels or a marketing analytics script.
Public articles and previews can be read without an account. We do not store a personal reading history in an application database.
Your account
The account service uses your email address to send a verification code and give you access to published full Baselines. Authentication records include a user identifier, email verification state and sign-in timestamps. Necessary session cookies keep you signed in.
Personal and work emails are both accepted. Registering does not subscribe you to marketing. There is no payment collection in this Beta.
If you contact us
Your email address and message are used to respond to your request. Please do not send confidential case files, privileged documents or sensitive personal information through a general enquiry.
Services and media
Vercel hosts the website. The account service uses Supabase for authentication and private result storage, and Resend for verification-email delivery. Contact email is handled through Zoho.
A public video may load from an external media host when you choose to play it. That host receives the request information needed to serve the video. Public media are intended to be shared; do not publish confidential content as public media.
Where data is processed
Our Supabase project is hosted in Ireland. Hosting, support and email providers can process data in other countries, including the United States. Selecting a European database region does not keep all service data in Europe. Resend stores email content and delivery records in the United States.
Where required for international transfers, our providers’ data processing agreements include standard contractual clauses and related safeguards. See the agreements for Supabase, Vercel and Resend. Contact us for more information about safeguards relevant to your data.
Why we process data
Where European or UK data protection law applies, we use account data to provide the account access you request. We rely on our legitimate interests in operating a reliable service, preventing abuse and answering enquiries for related security records and correspondence. Where a legal obligation applies, we process the data needed to meet it. We do not sell account data, use it for advertising, or use it to make automated decisions that have legal or similarly significant effects on you.
How long we keep data
We keep your account while you use the account service, until you request deletion or we close the service. There is no automatic inactivity deletion at present. Verification codes expire after 10 minutes; this does not delete the email from your inbox or the delivery provider. Resend’s current standard retention for email content and delivery logs on our plan is 30 days. Provider security logs and backups have separate retention periods and may remain for a limited period after account deletion.
We keep correspondence while needed to resolve your enquiry and any related dispute or legal obligation. If we must retain information after a deletion request, we will explain the reason and applicable retention period or criteria. We do not promise immediate deletion from every provider backup.
Your choices and rights
You can ask for a copy of account data, correction, or deletion by emailing the contact address. We may need to verify that the request comes from the account holder. Signing out removes the session from this browser; it does not itself delete an account.
Depending on applicable law, you can also ask to restrict processing, receive a portable copy of your data, or object to processing based on legitimate interests. Contact us at the address above; we will respond within the time required by applicable law. You can complain to the data protection authority responsible for your location. Providing an email address is optional, but we cannot provide an account without it.
Changes
Changes to this notice will be published here with an updated date. A material change to the account service will be described before it takes effect.