Your GDPR rights
Under the EU General Data Protection Regulation (GDPR) and Norwegian law, you have specific rights regarding the personal data we hold about you. This page explains what they are and how to exercise them.
For most of these, the fastest path is your account settings page. For anything that needs a human, email [email protected] and we'll respond within 30 days (usually much faster).
Right of access
You have the right to know what personal data we hold about you. You can see most of it directly in your account settings. For a complete machine-readable export of everything, use the "Export my data" button on your settings page (coming soon — for now, email us).
Right to rectification
If any of your personal data is wrong, you can correct most of it yourself in your account settings. For things you can't edit directly, email us.
Right to erasure ("right to be forgotten")
You can delete your account and all associated personal data at any time:
- Self-service: account settings → "Delete my account"
- By email: contact [email protected] from the email address on your account
Deletion is permanent. We erase your data from our active systems immediately and from backups within 30 days. Anonymous, aggregated analytics that can't identify you may be retained.
Right to data portability
You can export your collection and account data in a portable JSON format from your settings page (coming soon — for now, email us). The format is documented in our open-source repository so you can import it into other tools.
Right to object
You can object to specific processing of your data — for example, anonymous analytics collection. Contact [email protected] and tell us what you'd like to opt out of.
Right to restrict processing
You can ask us to temporarily stop processing your data while a dispute is being resolved (e.g. if you believe data is inaccurate, while we verify it).
Right to withdraw consent
Most of our processing is based on the contract between us (you signed up; we provide the service). For anything based on your consent, you can withdraw it at any time without affecting the lawfulness of past processing.
Right to lodge a complaint
If you believe we've handled your data improperly, you can complain to:
Datatilsynet (the Norwegian Data Protection Authority)
Web: datatilsynet.no
Postal: Postboks 458 Sentrum, 0105 Oslo, Norway
Phone: +47 22 39 69 00
We'd appreciate the chance to address your concerns first if you haven't already emailed us.
How to make a request
For most rights, the fastest path is your account settings. For anything else:
- Email [email protected] from the address on your account
- Tell us which right you want to exercise and what you'd like
- We respond within 30 days (usually within 1-2 business days)
- If we need to verify your identity, we'll let you know
- The service is free — we won't charge you for exercising your rights
More info
See the full Privacy Policy for details on what we collect, why, and where it lives.