Privacy Policy

EcoLens (“we”, “our”, “the Service”) is a media optimisation tool built by Prodhosh VS. This Privacy Policy explains what information we collect when you use EcoLens, how we use it, and how we keep it safe.

By using EcoLens you agree to the practices described here. If you do not agree, please stop using the Service.

1. Information We Collect

a) Authentication data

EcoLens uses Google OAuth 2.0 and GitHub OAuth for sign-in. We do not store your Google or GitHub password. When you authenticate we receive:

• Your name and email address (from Google or GitHub)
• Your public profile photo URL
• A unique OAuth user identifier

This information is stored securely in Supabase (our backend-as-a-service provider) and is used solely to identify your account and personalise your experience.

b) Usage data

When you use EcoLens to scan a URL we may collect:

• The URL you submitted for analysis
• Scan results (media asset list, size, format, savings estimate)
• Timestamp and approximate location (country level) derived from your IP address

We use this data to display your scan history and improve the accuracy of our analysis engine.

c) Technical data

We automatically collect standard server logs including your IP address, browser type, operating system, referring URL, and pages visited. This data is used for security monitoring and aggregate analytics only.

2. How We Use Your Information

• To authenticate you via Google OAuth or GitHub OAuth
• To store and retrieve your scan history from Supabase
• To serve Cloudinary-optimised media previews during a scan
• To send essential transactional emails (e.g. account notifications)
• To improve and debug the EcoLens platform

We do not sell your personal data to third parties.

3. Third-Party Services

EcoLens integrates with the following third-party services. Each has its own privacy policy:

• Google OAuth 2.0 — Identity provider. Google Privacy Policy
• GitHub OAuth — Identity provider. GitHub Privacy Statement
• Supabase— Database, authentication, and storage backend. Your data is stored in Supabase's infrastructure. Supabase Privacy Policy
• Cloudinary — Media transformation and delivery. URLs you submit may be passed to Cloudinary for optimisation previews. Cloudinary Privacy Policy

4. Data Retention

We retain your account data for as long as your account is active. Scan results are retained for 90 days and then automatically purged. You may request deletion of your account and all associated data at any time by emailing prodhosh3@gmail.com.

5. Security

All data is transmitted over HTTPS. Authentication tokens are managed by Supabase Auth with industry-standard encryption. We do not store OAuth access tokens beyond the session lifecycle. We take reasonable technical and organisational measures to protect your data, but no system is completely secure.

6. Cookies

EcoLens uses session cookies managed by Supabase Auth to keep you signed in. No third-party advertising or tracking cookies are used. You can disable cookies in your browser, but this will prevent you from signing in.

7. Your Rights

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability

To exercise any of these rights, email prodhosh3@gmail.com.

8. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of EcoLens after changes are posted constitutes your acceptance of the updated policy.

9. Contact

Questions or concerns? Reach out: prodhosh3@gmail.com