Privacy policy

1. Who we are

LodgeLens is operated by Lorebrain, a sole proprietorship (eenmanszaak) registered in the Netherlands with the Dutch Chamber of Commerce (KVK) under number 94136572 (“LodgeLens”, “we”, “us”), and is the data controller for the personal data described in this policy. For anything relating to your data, contact us at [email protected]. We have not appointed a separate Data Protection Officer; the email above reaches the people responsible for privacy at LodgeLens directly.

2. What we collect

We collect two kinds of personal data.

2.1 Report requests

When you request a report, we collect the email address you provide and the trip details you enter to run the search — destination, dates, budget, and any similar preferences you set. We also generate a unique, unguessable token for your report link, which is not personal data on its own but is linked to your email address in our records.

2.2 Site usage (analytics)

On our production site, and only once you actively consent via the banner in the footer, we use Google Analytics to understand aggregate traffic — pages viewed, approximate location from IP, device type, and interactions such as button clicks. We use Google’s consent mode, so no analytics cookie is set and no data is sent to Google until you consent, and you can withdraw consent at any time using the analytics settings link in the site footer. Report pages are recorded by their route pattern, never by the private token in the URL.

We do not use advertising cookies, do not run any tracking pixel other than Google Analytics, and do not build cross-site advertising profiles.

3. Why we process it, and our legal basis

• To generate and send your report (email address, trip details) — necessary to perform the free service you requested (Art. 6(1)(b) GDPR, or our legitimate interest in providing the service you asked for where no contract is formed since the service is free, Art. 6(1)(f)).
• To reply when you contact us (your email and message) — legitimate interest in responding to enquiries (Art. 6(1)(f)), or steps taken at your request (Art. 6(1)(b)).
• To prevent abuse, such as rate-limiting how many reports one address can request — legitimate interest in keeping the service usable and free (Art. 6(1)(f)).
• Site analytics — consent (Art. 6(1)(a)), which you can withdraw at any time with no effect on the reports you have already received.

4. Photo analysis does not involve your personal data

The core of LodgeLens is analysing accommodation listing photos that hosts and platforms have already made public, to judge whether a workspace is real. That analysis is about properties, not people, and does not use your email address or any data about you. It is processed through an AI vision provider under contract purely to produce the verdict shown in your report.

5. Who we share data with

We do not sell your personal data, and we never share it with the accommodation hosts or platforms whose listings we analyse. We do use a small number of processors to run the service, each bound by a data processing agreement and only permitted to use your data to provide their service to us:

• Email delivery — to send your report and any reply to a message you send us.
• Cloud hosting and infrastructure — to run the application and store report data.
• AI photo analysis — to process listing photos into workspace verdicts, as described in section 4.
• Google Analytics — only after consent, as described in section 2.2.

Some of these processors are located outside the European Economic Area, principally in the United States. Where that is the case, we rely on the European Commission’s Standard Contractual Clauses, or the processor’s certification under an equivalent adequacy framework, to ensure your data remains protected to EU standards.

We may also disclose data if required by law, or to protect the rights, safety, or property of LodgeLens, our users, or the public.

6. How long we keep it

• Reports are retained for a limited period — currently around 30 days from generation — after which the report and its link are deleted.
• Your email address is kept only as long as needed to deliver reports and respond to rate-limit or abuse checks tied to it, and is deleted or anonymised once it is no longer needed for those purposes, or sooner at your request.
• Support emails you send us are kept for as long as needed to resolve the matter and for a reasonable period afterwards in case you follow up, then deleted.
• Analytics data is retained by Google Analytics under its own retention settings, which we configure to the shortest period Google’s platform allows.

7. Your rights under the GDPR

If you are in the EEA, UK, or another jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you;
• Rectify data that is inaccurate or incomplete;
• Erase your data (“right to be forgotten”);
• Restrict or object to our processing of it;
• Receive a copy of your data in a portable format;
• Withdraw consent at any time, for processing based on consent, without affecting processing that happened before the withdrawal;
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, email [email protected]. We will respond within one month. Because a report link already lets you view and effectively abandon your own report at any time, most requests we receive are simple deletions, which we action promptly.

If you are not satisfied with our response, you can lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own EU member state.

8. Cookies and similar technology

We use only the technology strictly necessary to run the site, plus Google Analytics once you consent. No cookie is set and no data collection begins before that consent is given. Necessary technology includes the analytics consent banner storing your choice locally in your browser, so we do not ask again on every visit.

9. Children

LodgeLens is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the service changes. The current version is always on this page with the date it was last updated.

11. Contact

Questions about this policy or your data: [email protected]. See also our terms of service and about page.