The publication · Legal
Privacy Policy
By Thomas Lovas Lokoy, Co-founder & Editor
Last updated: 27 September 2026 · GDPR & Personopplysningsloven compliant
1. Data Controller
The data controller for this website is NorwegianSpark SA (Norwegian organisation number 834 984 172). For all data-related enquiries, contact thomaslien@norwegianspark.com or call +47 99 73 74 67. NorwegianSpark SA is subject to the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).
2. Data We Collect
We collect the following categories of data: (a) Analytics and affiliate-attribution data — collected via Google Analytics 4 and the affiliate networks we work with (Commission Junction, Impact, Rakuten Advertising and MyLead). Google Analytics 4 runs in Google Consent Mode: consent is denied by default, so until you click Accept it works without cookies and sends only cookieless measurements, including which partner links are clicked. We only grant analytics storage, ad storage, ad-user-data and ad-personalisation after you click Accept, and only then does Google Analytics set its cookies. This site does not load any affiliate-network script. When you click a partner link, it passes through our own /go/ redirect to the relevant affiliate network, and the network and the advertiser may then set their own cookies on their own websites. The purpose is to measure which pages are read and to credit a purchase back to the page that referred it. (b) Contact form submissions — when you use our contact form, we collect your name, email address, and message content. This data is processed on the legal basis of your consent (GDPR Article 6(1)(a)). (c) Server logs — standard HTTP server logs including IP addresses, timestamps, and requested URLs. These are stored for security and debugging purposes only.
3. Data Retention
Contact form data (name, email, message) is retained for a maximum of 2 years from the date of submission, after which it is permanently deleted. Server logs are retained for 30 days. Google Analytics retention is governed by the retention period set on the property; affiliate-network cookies are set and retained by those networks under their own policies, and their duration varies by network and by advertiser. Your consent choice itself is stored in your browser for 365 days, and you can change or withdraw it at any time from the cookie banner.
4. Third-Party Services
We do not sell or rent your personal data. We do use affiliate-attribution cookies, which are a form of advertising cookie: after you click a partner link, Commission Junction, Impact, Rakuten Advertising or MyLead and the advertiser may set identifiers on their own websites that let the advertiser credit a purchase to this site. Google Analytics 4 receives ad-storage and ad-personalisation consent only after you click Accept. Google advertising: where this site shows ads served by Google, third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. You may opt out of personalised advertising by visiting Google Ads Settings at https://adssettings.google.com, and you can opt out of some third-party vendors' use of cookies for personalised advertising by visiting www.aboutads.info. How Google uses information from sites that use its services is explained at https://policies.google.com/technologies/partner-sites. Our affiliate links direct you to independent platforms that are governed by their own privacy policies. Hosting is Cloudflare Workers; transactional email is Resend. This site does not use Vercel or Vercel Analytics.
5. Your GDPR Rights
Under the GDPR and Norwegian Personopplysningsloven, you have the right to: (a) Access — request a copy of all personal data we hold about you. (b) Rectification — request correction of inaccurate data. (c) Erasure — request deletion of your personal data ("right to be forgotten"). (d) Restriction — request that we limit processing of your data. (e) Data portability — receive your data in a machine-readable format. (f) Objection — object to processing of your personal data. To exercise any of these rights, email thomaslien@norwegianspark.com. We will respond within 30 days.
6. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no, or with your local supervisory authority if you are located in another EU/EEA country.
7. Contact
NorwegianSpark SA · Org no: 834 984 172 · Tveitagarden 4, 5357 Fjell, Norway · thomaslien@norwegianspark.com · +47 99 73 74 67