Privacy policy

Last updated 3 September 2026. Applies to the website varsko.net and our email list. The Varsko app will have its own privacy policy when it launches.

Who is responsible

Varsko AS, registration number 931 506 927, is the data controller for the information collected on this website.

Post: Varsko AS, Lyserenveien 946, 1825 Tomter, Norway. Email: morten@varsko.no.

What we collect, and why

When you join the list

We store the email address you enter, which page you signed up from, the time, and any campaign parameters in the link you arrived from. We use this to send you emails about how Varsko works and to tell you when the test opens, and to know which pages people sign up from.

The legal basis is your consent. You give it by entering your address and pressing the button next to a text explaining what you'll receive, and you confirm it in the first email we send. You can withdraw consent at any time using the link in every email, or by writing to us. Addresses that aren't confirmed are deleted after 30 days.

When you contact us as a partner or want to join a pilot

On the partner and pilot pages you can also provide your name, phone number, organisation and a message. We use this to reply to you and to assess a collaboration. The legal basis is that we need the information to follow up your enquiry. We keep it for as long as the dialogue is ongoing, and delete it no later than one year after last contact if no collaboration results.

Technical, to keep bots out

The forms are protected by Cloudflare Turnstile. On submission we also store a hashed version of your IP address and your browser's user agent. We use this to reject spam and to be able to document that a sign-up actually came from you. The legal basis is our legitimate interest in protecting the list from abuse. The hash cannot be turned back into your IP address. Turnstile processes data under Cloudflare's Turnstile Privacy Addendum.

Visitor statistics

We measure visits with Cloudflare Web Analytics. The service uses no cookies and no identifiers that could link visits to you. We see how many people visit which pages, not who.

Who processes the information for us

We use these providers, who process information on our behalf and under agreement with us:

• Cloudflare, Inc. for hosting the website, protecting the forms and visitor statistics. Cloudflare is a US company certified under the EU-U.S. Data Privacy Framework.
• Google Ireland Ltd. for storing sign-ups in a spreadsheet and for email in Google Workspace.
• n8n, which we operate ourselves, for moving information from the forms to the spreadsheet and the email tool.
• The tool we send email from. It will be named here once chosen.

We don't sell information, and we don't share it with anyone other than these.

How long we keep the information

• Email addresses on the list: until you unsubscribe, or until we've ended the test and told you so.
• Unconfirmed sign-ups: 30 days.
• Partner and pilot enquiries: as long as the dialogue is ongoing, at most one year after last contact.
• Technical log from the forms: 12 months, as documentation of consent.

Cookies

See the separate page on cookies. In short: none for marketing, none for statistics, only what the forms need to work.

Your rights

If you wish to exercise any of your rights, contact us at morten@varsko.no.

Right of access

You can request a copy of all the information we process about you. Contact us at the email address above to exercise your right of access.

Right to rectification

You have the right to ask us to correct or complete information that is inaccurate or misleading.

Right to erasure

You have the right to have your personal data deleted without undue delay. You can therefore ask us at any time to delete information about you. Note, however, that information we are required to keep under other legal obligations (such as bookkeeping law) will not be deleted.

Right to restriction of processing

In some situations you can also ask us to restrict the processing of information about you. You do this by managing consents or opt-outs in our solutions.

Right to object

If we process information about you on the basis of our tasks or a balancing of interests, you have the right to object to our processing. You do this by managing consents or opt-outs in our solutions.

Data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format. Contact us at the email address above to receive your data.

You can complain about our processing

We hope you'll let us know if you believe we're not complying with the Norwegian Personal Data Act. Please raise it first through the contact or channel you already have with us. You can also complain about our processing to the Norwegian Data Protection Authority (Datatilsynet).

Changes

We update this page when we change what we collect or who we use. The date at the top shows the last change.