Privacy Policy

Last updated: October 19, 2026

This policy explains what personal data is processed when you visit lungelock.com and what rights you have. We keep it simple: this site has no user accounts, no contact forms, no newsletter and no advertising scripts, and it does not set its own cookies. We use one privacy-friendly analytics service, Cloudflare Web Analytics (see below).

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is Heinz Schlecht, Austria. Contact: hello@lungelock.com.

Hosting (Cloudflare)

This site is hosted on Cloudflare Pages and delivered through Cloudflare's network (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open a page, your browser sends technical data that Cloudflare processes to deliver the site and protect it from abuse, for example your IP address, the date and time of the request, the page requested, your browser and operating system. This data is processed in short-lived technical and security logs. We do not combine it with other data.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). Cloudflare may process data outside the EU, including in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework and also uses the EU Standard Contractual Clauses. More: Cloudflare Privacy Policy.

Cloudflare Web Analytics

We use Cloudflare Web Analytics (provided by Cloudflare, Inc.) to understand how many people visit the site and which pages they read. A small script measures the page view and page load performance. It does not set cookies, does not use local storage, does not create personal profiles and does not track you across other websites. We only see aggregated statistics, such as visitor and page-view counts, referring sites, countries and device types. Your IP address is not used to identify you.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding and improving the site). More: Cloudflare Web Analytics.

Amazon Associates and affiliate links

LungeLock is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com.

Product links on this site are affiliate links to Amazon.com. Nothing is sent to Amazon while you are on our pages. Only when you click such a link do you leave our site, and Amazon then receives the information that you came from lungelock.com (through a tracking code in the link). Third parties, including Amazon, may place and read cookies on your browser, or use web beacons or similar technologies, to collect information as a result of ads and links on this site, for example to attribute a purchase to us. We do not receive your name, address or what else you buy; we only see aggregated reports such as numbers of clicks and orders.

Legal basis for the link and tracking code: Art. 6(1)(f) GDPR (our legitimate interest in financing the site through commissions). Any cookies set on amazon.com are Amazon's responsibility; see the Amazon.com Privacy Notice and Amazon's cookie settings.

Instagram link

We link to our Instagram profile. It is a plain link: no Instagram scripts or embeds load on this site. Once you open Instagram, Meta's privacy policy applies.

Email

If you email us, we use your address and message only to reply and keep the conversation as long as needed for that purpose, unless the law requires us to keep it longer. Legal basis: Art. 6(1)(b) or (f) GDPR. Emails to our address are received by Cloudflare Email Routing and forwarded to our private mailbox, so Cloudflare and our email provider process them on our behalf.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15),
• have it corrected (Art. 16) or erased (Art. 17),
• restrict its processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw any consent you gave, with effect for the future.

To use these rights, email hello@lungelock.com. You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Vienna, dsb.gv.at. You can also contact the authority in your own EU country.

Changes

We update this policy when the site changes, for example if we add new partners or tools. The date at the top shows the latest version.