Data protection means limiting information, having a defined purpose and being able to document how data is handled. This page sets out operational principles and unresolved deployment details.
Data minimisation
The app uses fixed Oslo coordinates for weather and does not need your location. News selection and search are not linked to an account or visitor profile. The local preference contains no name or email. Correspondence should contain only information needed for the specific matter.
Purpose and access
Contact information should be used to handle the request, not to create a later marketing list. Access to any inbox and operational information must be limited to those who need it. Supabase stores news records and Cloudflare R2 stores approved images. Public database access is restricted to published articles; ingestion and image storage require separate server credentials. No data protection officer has been identified.
Retention, providers and transfers
Local storage is cleared or expires under the cookie policy. Production logs and email do not yet have a confirmed deletion schedule. Before launch, the responsible operator must document retention, provider agreements, processing locations and any transfer basis outside the EEA. We do not claim that all information is stored in Norway.
Review and requests
New features must be assessed before they collect additional personal data. Use the personal-data-rights page for access or deletion and the security page for vulnerabilities. A stated operating principle is not evidence that a production control has already been completed.
References
Contact us
The link opens your email app. No message is sent automatically.
