Privacy Policy
Last updated: September 2026
Who we are
GeoLens is a public platform for exploring world data through charts, maps and shareable posts, available at geolens.eu. The service is hosted on DigitalOcean App Platform in the European Union and operated from Poland, which is the data controller for your personal data. For any privacy-related question or to exercise your rights, contact hello@geolens.eu. The controller is Robust Systems, NIP 894-315-12-19.
What we collect
GeoLens collects the minimum data needed to provide the service:
- Account data. If you create an account, we store your email address, display name, and a hashed password via ASP.NET Core Identity. If you sign in with Google, we receive your email address and display name from Google; no password is stored.
- Session cookie. A single essential session cookie is set when you sign in to keep you authenticated. This cookie is necessary for the service to function and cannot be declined while you are signed in. It is not used for advertising or tracking.
- User-generated content. If you use account features, we store the charts and posts you save in Projects. A chart or post you make gets its own private or shareable link; it is not submitted anywhere for review.
- Server logs. DigitalOcean's infrastructure may log standard HTTP access data (IP address, request URL, timestamp) for security and operational purposes. We do not use these logs for profiling.
- Feedback you send. If you use the in-app Feedback button, we store the message you type together with the context the dialog shows you before sending: the page you were on, the app version, your window size, and the id of the chart or post on screen. Your email address is stored only if you type it in - the field is optional and exists so we can answer you.
We use no advertising trackers, no session-replay tools, and sell no data. We use Google Analytics (GA4) for aggregate usage analytics, and it loads only after you accept in the cookie banner (IP addresses anonymised). Until you do, or if you choose "Essential only", nothing is sent to Google and every feature works the same.
What that measurement contains, plainly: which pages are viewed and which product actions happen (a chart published, a post downloaded, a button clicked), plus a technical error signal when something breaks - sent as a short error code, never the error text. No event ever carries your email, your name, your account id, or anything you typed. Analytics data is retained in Google Analytics for 14 months, then deleted automatically. Questions about any of this: hello@geolens.eu answers them.
How we use your data
- To authenticate you and maintain your session.
- To store and display your saved charts and posts.
- To generate the shareable link for a chart or post you save, if you choose to share it.
We do not sell your personal data and we share it only with the processors we need to run the service. In full:
- DigitalOcean - hosting and the database, EU region (Frankfurt), and object storage for the images your charts and posts are rendered into.
- Stripe - payments. If you subscribe, Stripe receives your email and the billing details you give it. We never see or store your card number.
- Resend - transactional email. Receives your email address whenever we send you a message you asked for.
- Cloudflare - sits in front of the site and renders social preview images. Sees request metadata, including your IP address.
- Google - OAuth identity, only if you choose to sign in with Google; and Google Analytics, as described above.
- Sentry - error tracking. Configured not to send personal data with error reports.
Legal basis (GDPR Art. 6). We process account data and the essential session cookie to perform the contract of providing your account (Art. 6(1)(b)); we keep security and access logs on the basis of our legitimate interest in operating the service securely (Art. 6(1)(f)).
Data retention
Account data is retained while your account is active.
You can delete your account yourself, immediately, from your Account page. That removes your account and the work attached to it: saved charts, the posts you published and your notifications. Published work becomes unavailable at the same time, so links you have shared will stop resolving.
If you subscribe, deleting the account cancels the subscription at once, with no refund for the rest of the period. Stripe deletes your customer record and saved payment method, and keeps the billing records tax law requires.
You can also download a copy of your data first, from the same page. The export is a single JSON file containing your profile and the work associated with your account.
Two things outlive the account by design: security and administrative logs, which we keep because we need them to operate the service safely, and any feedback you chose to send us, which is kept while it is useful for improving the product. If you want either removed, write to hello@geolens.eu and we will action it within 30 days.
Your rights
If you are based in the European Union, you have rights under the GDPR: the right to access your personal data, to correct it, to delete it, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw that consent at any time without affecting prior processing. To exercise any of these rights, contact us at hello@geolens.eu.
You also have the right to lodge a complaint with a data-protection supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), uodo.gov.pl (opens in a new tab).
Changes to this policy
If we make material changes to this policy, we will update the "last updated" date above. Continued use of GeoLens after a policy change constitutes acceptance of the revised terms.