Privacy policy
This policy explains which personal data NorskGrammatikk processes, why, and what rights you have under the General Data Protection Regulation (GDPR). We collect as little as possible.
1. Who is responsible
The data controller is Oskars Barkovskis, who runs NorskGrammatikk. You can reach me at [email protected]. No postal address is published.
2. Server logs
When you open a page, the web server automatically logs your IP address, the date and time, the page you requested, the referring page and your browser. We use these logs only for security and to fix errors. The legal basis is our legitimate interest in a safe and working site (GDPR art. 6(1)(f)). The logs are deleted automatically after 14 days.
3. Hosting
The site is hosted by Hetzner Online GmbH (Germany). The server is located in Helsinki, Finland, inside the EU. We have a data processing agreement with Hetzner.
4. Cloudflare
Cloudflare, Inc. delivers and protects the site (DNS, content delivery network and protection against attacks). For this, Cloudflare processes IP addresses and technical data. Transfers to the USA are covered by the EU-US Data Privacy Framework and standard contractual clauses.
5. Cookies
We use one technically necessary session cookie called PHPSESSID. It protects forms against misuse (CSRF protection) and keeps your test answers during your visit. It is deleted when you close the browser. Because it is strictly necessary, no consent is needed. We use no advertising cookies and no social media cookies.
Google Analytics (only if you agree): to understand which pages are useful and how people find us, we use Google Analytics 4 from Google Ireland Limited. It only starts after you click «Accept» in the cookie banner. It then sets the cookies _ga and _ga_* (kept for up to 13 months) and collects data such as the pages you visit, time on page, approximate location (country or city), device, browser and how you found the site. Google Analytics 4 does not store IP addresses. Advertising features and ad personalisation are switched off. Google may process data in the USA, covered by the EU-US Data Privacy Framework. Legal basis: your consent (GDPR article 6(1)(a)). You can change your choice at any time with «Cookies» at the bottom of every page.
6. Test results
When you finish a test, we store the result anonymously: the level, the score and the interface language. The result is not linked to you.
7. Book notification list
If you sign up to hear about the book, we store your name, your e-mail address, the format and language you chose, and a one-way hashed version of your IP address to stop abuse. The only purpose is to send you one e-mail when the book is published. The legal basis is your consent (GDPR art. 6(1)(a)).
You can withdraw your consent at any time by sending an e-mail. We delete your data on request, or at the latest 6 months after the book is published. We never sell or share your data.
8. Pronunciation recorder
When you use the pronunciation recorder, the recording happens only in your browser. The audio is never uploaded or stored by us.
9. Fonts, images and audio
Fonts, images and audio files are served from our own server. We do not use Google Fonts or external embeds, so opening a page does not send your data to other companies.
10. Your rights
- Access to the data we hold about you
- Correction of wrong data
- Deletion of your data
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of your consent at any time
To use your rights, write to [email protected]. We answer within one month. You also have the right to complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no), or to the data protection authority in your country.
11. Children
The learning content is for everyone. Children under 16 should ask a parent before signing up to the e-mail list.
12. Changes to this policy
We may update this policy, for example if the site gets new features. The latest version is always on this page.
Last updated: 17 October 2026