Lens

Privacy & Cookies

Last updated · 2026-05-21

Who we are

DropshipLen is a free intelligence suite for DTC store owners. Three tools — FreightLens (freight rate audit), RivalLens (Shopify store scoring), and StoreLens (archetype quiz) — run at dropshiplen.com.

What data we collect

  • Audit inputs you submit — e.g. weight, dimensions, destination, daily volume, your store URL. Stored to give you a result and to compute aggregated industry stats.
  • Lead form data — email, optional company, optional WhatsApp / Telegram contact, archetype / score. Stored so we can follow up with the personalised plan you requested.
  • Technical metadata — hashed IP address (never raw), browser user-agent, referrer URL, timestamp. Used for rate-limiting and fraud prevention.
  • UTM / referral tags — to attribute traffic to campaigns or influencers when you arrive via a tagged link.
  • Public Shopify data — when you submit a store URL we fetch the store's public homepage and /products.json endpoint to compute scores. No private merchant data is accessed.

Cookies we use

Two categories:

Essential (always on)

  • Session cookies for the audit form submission
  • Basic Auth cookie for the admin area (internal use only)
  • localStorage entries for UTM attribution, your audit results, and your cookie-consent decision

Optional (require consent)

  • Vercel Analytics — aggregated page views, no personal data
  • Google Analytics 4 — usage analytics; data stored by Google
  • Meta (Facebook) Pixel — ad attribution; data stored by Meta
  • TikTok Pixel — ad attribution; data stored by TikTok (only loaded if active)
  • Google Ads conversion tag — only loaded if active

The optional cookies only load after you click "Accept all"in the banner. If you click "Reject optional", no analytics or marketing scripts run; you can still use all the tools.

Where data is stored

  • Audit + lead data — Supabase (PostgreSQL), region us-east-1 (Virginia, USA)
  • Lead duplicates — pushed to a Feishu (Lark) multi-dimensional table operated by HiDropship's team in China for follow-up
  • Hosting — Vercel global edge network

For EU visitors: data transferred to the US relies on Standard Contractual Clauses (Supabase / Vercel both publish SCCs). Feishu is a Chinese service; by submitting a lead you consent to your contact details being forwarded there for sales follow-up.

How long we keep it

  • Audit data — kept indefinitely for aggregated stats; can be deleted on request
  • Lead data — until you ask us to delete it
  • Rate-limit logs (hashed IP only) — auto-pruned after 7 days
  • UTM attribution in your browser — 30 days, then expires
  • Cookie consent decision — 6 months, then re-prompts

Your rights (GDPR / UK GDPR / similar)

You have the right to:

  • Access the data we hold about you
  • Correct it
  • Delete it ("right to be forgotten")
  • Withdraw consent at any time (clear browser cookies → banner re-appears)
  • Object to processing
  • Data portability

Email privacy@hidropship.com with your request and we'll respond within 30 days.

Contact

Changes to this policy

We'll update this page if we add new cookies or change how data is used. The "Last updated" date at top reflects the latest revision.