Privacy.

What we collect

• Account identity. Your email address and any name you give Clerk when you sign up. Stored by Clerk, not by us.
• Saved places. The places you tap the heart on, tied to your account so they sync across your devices. We store the place id and your user id; nothing else.
• Newsletter address(optional). Only if you submit it on a subscription form. Stored in our database for double opt-in and in Resend's audience for sending.
• Anonymous usage. Page views and basic interactions, only if you accept analytics cookies. We never attach your name or email to these events.
• IP address. Temporarily, for spam / rate-limit protection on geocoding and signup forms. Not retained.

Who processes data

• Vercel. Site hosting. EU region. ISO 27001, GDPR-compliant.
• Clerk. Authentication. Stores your email and optional profile fields.
• Neon. Postgres database (EU region). Holds your saved-places list.
• Resend. Newsletter delivery, only if you subscribe.
• Cloudflare R2. Image storage.
• PostHog (EU Cloud). Anonymous analytics, only if you accept analytics cookies.

Cookies

Strict-necessarycookies (your sign-in session) are set without consent. Without them the site can't authenticate you. Analytics cookies (PostHog) only fire after you accept the banner. You can change your mind any time by clearing the oc-consent cookie.

Your rights

Under GDPR and Norwegian law, you have the right to:

• Access a copy of your personal data (Art. 15)
• Correct inaccurate data (Art. 16)
• Have your data deleted (Art. 17)
• Restrict or object to processing (Art. 18, 21)
• Take your data elsewhere (Art. 20)

Account deletion is a one-click action on your profile. For everything else, email hello@oslo-collective.com and we'll respond within 30 days.

Contact

Questions, concerns, or a request to exercise any of the rights above: hello@oslo-collective.com.