Postlens

Privacy Notice

Last updated: 2026-04-24

This notice explains what personal data Postlens processes when you use the site, who it is shared with, and your rights under the UK General Data Protection Regulation (UK GDPR).

Who is responsible

Postlens is operated by Enzo Tang as an individual controller. Contact us via the contact form.

What we process

  • Postcode queries you submit in the search box. These are not personal data on their own but can be if combined with your IP.
  • Standard request metadata: IP address, user agent, referrer, timestamp — handled by our hosting provider.
  • Anonymous analytics: aggregate, cookieless page views via Vercel Analytics.
  • Messages you send us via email, if you contact us.

Third-party processors

Postlens is built on services that process data on our behalf. Each has its own privacy policy.

  • Vercel Inc. — hosting and cookieless Web Analytics. Receives request metadata (IP, user agent). Vercel policy.
  • Upstash Inc. — Redis cache storing aggregated API responses and AI outputs keyed by postcode. Does not receive your IP. Upstash policy.
  • Google LLC (Gemini API) — generates AI summaries from server-aggregated numbers. Receives the aggregated context, not your IP or identity. Google policy.
  • MapTiler AG — serves map tiles directly to your browser. Receives your IP as part of tile requests. MapTiler policy.

Legal basis

  • Legitimate interest (Art. 6(1)(f) UK GDPR) for serving the site, caching responses, and operating cookieless analytics to understand usage.
  • Legitimate interest for responding to emails you send us.

Cookies

Postlens does not set tracking or advertising cookies. Vercel Analytics is cookieless. Your browser may store local preferences (e.g. dark-mode setting) that never leave your device.

Retention

  • Cached API/AI responses: up to the cache TTL, typically days.
  • Analytics aggregates: per Vercel's retention defaults.
  • Emails: kept as long as needed to handle your request.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Request correction or erasure
  • Object to processing based on legitimate interest
  • Complain to the UK Information Commissioner's Office (ICO)

To exercise any right, submit a request via the contact form and choose the “UK GDPR request” category.

Changes

Material changes to this notice will bump the “Last updated” date above. Please check back periodically.