Last updated: 26 July 2026
CivicLens is an independent, personal project — not a registered company. This policy explains what data the site collects and why, in plain terms.
Creating an account requires an email address, either directly or via Google or Microsoft sign-in. If you sign in with Google or Microsoft, we only receive your email address and name from that provider — we never see your password. Account data (email, hashed password if you registered directly, sign-in timestamps) is stored with our database provider, Supabase, on their hosting infrastructure.
You can run one search without an account. This is tracked using a single first-party cookie (cl_anon_search) that only records whether your browser has used its free search — it contains no personal information and isn't linked to an identity.
The postcodes and place names you search are sent to the upstream data providers needed to answer that search (for example postcodes.io, OpenStreetMap/Photon, police.uk, DEFRA, Companies House, Ofsted/DfE, and HM Land Registry). Responses from these providers are cached in our database, keyed by location, to avoid re-querying them on every visit — this cache is not linked to your account or search history.
We use strictly necessary cookies only: a Supabase session cookie (keeps you signed in) and the anonymous-search cookie described above. Your dark/light theme preference is stored in your browser's local storage, not a cookie.
You can request a copy of your data or ask for your account and associated data to be deleted at any time by emailing [email protected]. We'll action deletion requests promptly.
CivicLens is not directed at, or intended for use by, children under 16.
As a small, evolving project this policy may change as features are added. Material changes will update the date at the top of this page.
Questions about this policy can be sent to [email protected].