Privacy Policy
Last updated: 2026-05-29
Feedback by Xlens lets product makers collect verified reviews. This page explains what data we process when you leave a review, and why.
Who is responsible
Xlens provides the technical platform and hosts the review pages. The maker of the product you are reviewing is responsible for moderating and using the reviews and emails collected for their product. For any request, contact us at al@obsidian-it.be.
Data we collect
- Your review: rating, comment and name (if provided). The name and comment are shown publicly.
- Your email (optional, unless the maker requires it): used to verify your review and, if you consent, to send you updates. Your email is never shown publicly.
- Technical data: an anonymised (hashed) fingerprint of your IP address and your user-agent, kept to limit spam and detect abuse. We do not store your IP address in clear text.
- Your consents: if you tick an opt-in box, we record the fact, the date, and the version of the text you agreed to.
Why (legal basis)
- Publishing your review and verifying your email: performance of the service you request.
- Anti-spam / security: legitimate interest in protecting the platform.
- Marketing emails: only with your explicit consent, withdrawable at any time.
Emails and consent
Opt-in boxes are never pre-ticked. You can unsubscribe at any time via the link in every email, or by contacting us. Unsubscribing does not affect the publication of your review.
Cookies and analytics
Our public pages use Google Analytics to understand, in aggregate, how they are used. No analytics cookie is set until you accept it via the consent banner: consent is denied by default. You can decline with no loss of functionality, and change your mind by clearing the xlf_consent cookie in your browser. That cookie is strictly necessary and only remembers your consent choice.
Duplicates and private browsing
To avoid duplicate reviews, we compare the hashed IP fingerprint. If a review appears to come from the same device or network, we flag it to the maker, who decides. We do not auto-block, and we never reveal IP addresses in clear text.
Retention
Reviews are kept for as long as the product page exists. Verification tokens expire after 7 days. You can request deletion of your review and email at any time.
Your rights
You can request access, correction or deletion of your data, withdraw your consent, or object to processing. Write to al@obsidian-it.be.
Processors
- Email delivery: Amazon SES.
- Anti-bot protection: Cloudflare Turnstile.
- Analytics: Google Analytics (only after your consent).
- Site icons (favicons): loaded by your browser from Google, based on the product's domain.