Privacy.

What we collect

• Account identity — your email address and any name you give Clerk when you sign up. Stored by Clerk, not by us.
• Saved places — the places you tap the heart on, tied to your account so they sync across your devices. We store the place id and your user id; nothing else.
• Newsletter address (optional) — only if you submit it on a subscription form. Stored in our database for double opt-in and in Resend's audience for sending.
• Anonymous usage — page views and basic interactions, only if you accept analytics cookies. We never attach your name or email to these events.
• IP address — temporarily, for spam / rate-limit protection on geocoding and signup forms. Not retained.

Who processes data

• Vercel — site hosting. EU region. ISO 27001, GDPR-compliant.
• Clerk — authentication. Stores your email and optional profile fields.
• Neon — Postgres database (EU region). Holds your saved-places list.
• Resend — newsletter delivery, only if you subscribe.
• Cloudflare R2 — image storage.
• PostHog (EU Cloud) — anonymous analytics, only if you accept analytics cookies.

Cookies

Strict-necessary cookies (your sign-in session) are set without consent — without them the site can't authenticate you. Analytics cookies (PostHog) only fire after you accept the banner. You can change your mind any time by clearing the oc-consent cookie.

Your rights

Under GDPR and Norwegian law, you have the right to:

• Access a copy of your personal data (Art. 15)
• Correct inaccurate data (Art. 16)
• Have your data deleted (Art. 17)
• Restrict or object to processing (Art. 18, 21)
• Take your data elsewhere (Art. 20)

Account deletion is a one-click action on your profile. For everything else, email hello@oslocollective.com and we'll respond within 30 days.

Contact

Questions, concerns, or a request to exercise any of the rights above: hello@oslocollective.com.