Who operates CheckoutLens
CheckoutLens is an independent consumer-information project. Before public launch, the operator should publish their legal name and a monitored contact address on the Contact page.
Account information
If you create an account, your email address and authentication credentials are processed by Supabase Auth. CheckoutLens receives an access token to verify your signed-in session. Passwords are handled by Supabase and are not available to CheckoutLens.
Browser extension scans
The basic extension scan reads visible text from the active webpage only after you click the scan button. It does not read form values or cookies. The basic scan is processed locally in your browser; page text is not sent to the CheckoutLens API.
Website store checks
When you submit a store URL while signed in, the URL and your authentication token are sent to the CheckoutLens API. The API requests selected public pages on the same website and processes their page text in memory to generate a report. The page text is not intentionally stored in the CheckoutLens database. The API stores your daily scan count in Supabase to enforce the five-check daily limit. Server error logs may contain diagnostic error messages; do not submit sensitive URLs.
Service providers
Supabase provides authentication and database hosting. The website operator should review the applicable Supabase terms and configure the project region and retention settings appropriately.
Advertising
Advertising is not active in this version. If Google AdSense is enabled later, Google and its partners may process device and usage information and use cookies or similar technologies subject to applicable consent requirements. This policy and the consent setup must be updated before ads are activated.
Retention and account deletion
Daily usage counters are retained in the database. Account deletion and any related data deletion must be requested through the contact channel once configured; the operator must implement and verify the deletion process before launch.
Your choices
You can sign out, clear browser storage or request information about your account data. Clearing browser storage may sign you out but does not delete the account held by Supabase.
Policy updates
This policy should be reviewed whenever the data flows, hosting providers or advertising configuration change.