N° I, Privacy
Privacy.
We hold as little personal data as we can. Here's exactly what, why, and what you can ask us to do with it.
What we collect
- Account identity. Your email address and any name or username you give Clerk when you sign up. Clerk stores this account data. When you are signed in, we also send your primary email, name, username, account creation and latest sign-in dates, and email verification status to PostHog so we can connect product usage with your account.
- Saved places. The places you tap the heart on, tied to your account so they sync across your devices. We store the place id and your user id; nothing else.
- Newsletter address (optional). Only if you submit it on a subscription form. Stored in our database for double opt-in and in Resend's audience for sending.
- Usage analytics. Page views, interactions, browser and device details, approximate location, and referrer information. This is anonymous while you are signed out and is associated with your account identity while you are signed in.
- IP address. Temporarily, for spam / rate-limit protection on geocoding and signup forms. Not retained.
Who processes data
- Vercel. Site hosting and delivery. ISO 27001, GDPR-compliant.
- Clerk. Authentication. Stores your email and optional profile fields.
- Neon. Postgres database (EU region). Holds your saved-places list.
- Resend. Newsletter delivery, only if you subscribe.
- Cloudflare R2. Image storage.
- PostHog (EU Cloud). Product analytics and error monitoring. For signed-in visitors, it receives the account identity fields described above.
Cookies
Strict-necessary cookies (your sign-in session) are set without consent. Without them the site can't authenticate you. Analytics storage (PostHog) is used for product analytics unless your browser sends a Do Not Track signal. You can clear the site's cookies and local storage to reset its browser identifier.
Your rights
Under GDPR and Norwegian law, you have the right to:
- Access a copy of your personal data (Art. 15)
- Correct inaccurate data (Art. 16)
- Have your data deleted (Art. 17)
- Restrict or object to processing (Art. 18, 21)
- Take your data elsewhere (Art. 20)
Account deletion is a one-click action on your profile. For everything else, email hello@oslo-collective.com and we'll respond within 30 days.
Contact
Questions, concerns, or a request to exercise any of the rights above: hello@oslo-collective.com.
Last updated: 2026-09-20.