Skip to content
LensFinder.org

Privacy Policy

This privacy policy explains which personal data is processed when you visit LensFinder.org, on what legal basis, and which rights you have.

1. Controller

Hanseatic Bits UG (haftungsbeschränkt) & Co. KG
Zeissstraße 1, 49733 Haren (Ems), Germany
Register court: AG Osnabrück, HRA 207769
Represented by its general partner Hanseatic Bits Verwaltungs UG (haftungsbeschränkt), AG Osnabrück, HRB 216773, represented by its managing director Philip Thomas
Phone: +49 5932 500 9803 · Email: [email protected]

You can send data protection requests to this email address.

2. In short

  • LensFinder.org has no user accounts, no registration and no forms.
  • There is no tracking by third-party advertising or analytics services. We measure reach with Plausible Analytics, without cookies and without storing IP addresses.
  • Fonts, icons, scripts and images come from our own servers. Loading a page does not make your browser request anything from Google, Meta or advertising networks.
  • Website and database run on Hetzner servers in Germany. All requests first pass through the content delivery network of Cloudflare (USA).
  • The price buttons lead to Amazon. Data is only sent there once you click.
  • The website sets no cookies, which is why there is no cookie banner.

3. Hosting and technical operation

We run the website on our own servers at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (processor under Art. 28 GDPR). The database (PocketBase) with the lens data, blog articles and images is hosted there as well.

When the website is accessed, technically necessary connection data is processed: IP address, date and time, requested address, referrer URL, browser and operating system. It is needed to deliver the page and keep operation secure. Our application and server do not keep permanent logs of page views.

Your browser loads the images of blog articles and mount pages from our database address db.lensfinder.org. The database keeps an access log for this with the requested address, time, referrer and browser identifier, which is deleted automatically after five days at the latest. Your IP address is not in it, because the requests reach the database through our proxy. Our server delivers the lens images itself. It fetches them when needed from our image storage (media.lensfinder.org); your browser does not contact it.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning website).

4. Delivery through Cloudflare

LensFinder.org and its related addresses (db.lensfinder.org, media.lensfinder.org, amzn.lensfinder.org) run through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (processor under Art. 28 GDPR). Your request is routed to a Cloudflare server near you. Cloudflare processes the technical connection data, mainly the IP address, to cache and deliver pages and to protect against attacks and abuse. Cloudflare sets no cookies on this website. The forwarding of measurement data to our Plausible installation (section 5) also passes through Cloudflare.

Data may be processed in data centers outside the EU, including in the USA. Cloudflare is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission covers the transfer to the USA (Art. 45 GDPR). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in fast and secure delivery of the website). More information: https://www.cloudflare.com/privacypolicy/

5. Reach measurement with Plausible Analytics

We use Plausible Analytics for reach measurement. We run the software ourselves on Hetzner servers in Germany. Measurements do not go from the browser straight to a third-party server: the script is served by LensFinder.org itself, and measurements pass through our own server, which forwards them to our Plausible installation. In doing so, our server passes your IP address and browser identifier (user agent) on to Plausible so that visits can be told apart.

Plausible sets no cookies, stores nothing on your device and builds no user profiles. The IP address is not stored. It is only combined with the browser identifier and a daily changing random value into an identifier that cannot be reversed and can no longer be matched after 24 hours. Aggregated data is recorded, such as page viewed, referrer, country, device type, browser and operating system, as well as clicks on links to other websites (for example to Amazon). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the site).

6. Amazon links (affiliate program)

Many lenses have a "Check price" button. It leads to Amazon and is an affiliate link: if you buy there, we receive a commission, and the price does not change for you. We take part in the Amazon affiliate programs.

The button first goes to our address amzn.lensfinder.org. It forwards you to the matching Amazon store for your country (for example amazon.de, amazon.co.uk or amazon.com) and adds our affiliate ID to the link. For this, your IP address is processed at the click to determine the country. The service runs on our servers at Hetzner and keeps no logs. From the click on, Amazon's privacy policy applies: Amazon may set cookies to attribute a purchase to our affiliate ID and is itself responsible for this. As long as you do not click, no data is sent to Amazon.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in funding the website through affiliate links and sending you to the right store).

7. Contact by email or phone

When you contact us by email ([email protected]) or phone, we process your name, contact details and the content of the message to answer your request. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering inquiries) or, for contract-related requests, Art. 6(1)(b) GDPR. Messages are deleted once the matter is closed, unless statutory retention periods apply (for example six years for business letters under § 257 HGB and § 147 AO). The mailboxes are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (processor under Art. 28 GDPR).

8. External links

The website contains links to the websites of manufacturers and retailers, to Amazon and to our profile on Mastodon. No plugins, buttons or embeds of these services are included, and no data is sent to them when the website is accessed. Only when you click a link does the operator of the target site process data under its own privacy policy.

9. Cookies and local storage

This website sets no cookies. The browser only keeps technically necessary navigation data, namely the scroll position and page state when going back, in session storage (sessionStorage). It is deleted when the tab is closed. The website stores nothing in local storage (localStorage). Only if you open a page with ?amzn= in the link does the browser remember the affiliate ID given there for the Amazon links until the tab is closed. This does not affect normal visitors. Under § 25(2) no. 2 TDDDG, session storage needs no consent, which is why there is no cookie banner.

10. Third countries and automated decisions

Data is transferred outside the European Economic Area only through Cloudflare (see section 4) and, if you click an Amazon link, to Amazon (section 6). There is no automated decision-making including profiling under Art. 22 GDPR. Providing personal data is neither required by law nor by contract.

11. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). An informal email to [email protected] is enough to exercise them.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller's seat is the Landesbeauftragte für den Datenschutz Niedersachsen (the State Commissioner for Data Protection of Lower Saxony), Prinzenstraße 5, 30159 Hannover, Germany, email: [email protected], www.lfd.niedersachsen.de. You can also complain to the authority in your place of residence or the place of the alleged infringement.

12. Changes

This privacy policy is updated when the website or the legal situation changes. The version published here applies.

Last updated: 11 October 2026

Mastodon