Privacy Policy

This policy explains how Desken AS (company reg. no. 984 358 202 MVA) (“we”) processes personal data when you use Erken-arkivet. We are the data controller for the information described here.

1. In brief

• You can read the entire archive without registering or being tracked.
• We use only cookie-free, anonymised visitor statistics (Vercel Analytics). Statistics (Google Analytics) and ads (Google AdSense) are used only if you actively consent.
• We use only necessary cookies for logging in. See cookies.
• If you create an account, we store your email address. If you choose to contribute content, we store what you submit.

2. What information we process

When you only read

Then we normally process no personal data beyond what is technically necessary to deliver the website (e.g. temporary technical logs at our subprocessors for operations and security).

When you create an account

• Email address
• Password (always stored encrypted/hashed – we never see your password)
• Time of registration and login

When you contribute content

• Your own interpretations and text you write
• Photos or video you upload
• Display name and any links you choose to provide

With a personal invitation (“Meet Henriette”)

If you receive a personal invitation link from us, we process your name (and, if the sender provides them, email and company), the conversation text you write with Henriette (stored so we can follow up), and – only if you ask for it – the email address to send you the recipes. The conversation text is processed by Anthropic (Claude) to produce the replies. The link can be deactivated at any time, and data is deleted on request.

If you share your cookbook publicly

If you choose to make “My cookbook” public, your recipes (and your display name) become available to anyone with the link and can be shared on social media. Sharing is optional, off by default, and requires you to actively accept a licence granting the Erken archive a royalty-free right to use the content editorially and commercially, digitally and in print. You can make the cookbook private again at any time, but material already published or printed cannot be withdrawn. Do not share personal data or content belonging to others that you do not have the right to share.

3. Purposes and legal basis

4. Data processors and subprocessors

We use established providers that process data on our behalf, under a data processing agreement:

• Supabase – database, login (authentication) and storage of uploaded content. The data is stored in the EEA (Sweden).
• Vercel – operation and delivery (hosting) of the website, as well as anonymised, cookie-free visitor statistics (Vercel Analytics).
• Resend – sends email: both from the contact form to us, and the recipe email from “Meet Henriette” when you ask for it. Processes the name, email address and the content sent.
• Cloudflare (Turnstile) – spam protection that confirms the form is filled in by a human. Uses no cookies.
• Google (Analytics and AdSense) – anonymised visitor statistics and ads that fund the archive, both only if you actively consent. We use Consent Mode; statistics with anonymised IP, and ads via AdSense (may set advertising cookies on consent). Data may be transferred to the USA.

To generate editorial article drafts, we use Anthropic (Claude API). For article drafts, no personal data is sent there – only historical source texts and editorial instructions. In the “Meet Henriette” chat, however, the conversation text you write is processed in order to reply to you.

Account information and content are stored in the EEA (Sweden). Certain services for email delivery (Resend), security (Cloudflare), hosting (Vercel) and – on consent – statistics (Google Analytics) and ads (Google AdSense) may involve transfer to the USA. Any such transfer takes place on a valid basis, such as the European Commission's Standard Contractual Clauses (SCC) or the EU–US Data Privacy Framework.

5. How long we store data

• Account information: for as long as you have an account. If you delete the account, it is removed.
• Published contributions: for as long as they remain online, or until you ask for their removal.
• Email inquiries: for as long as necessary to follow up the matter.

6. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the information we hold about you
• have inaccurate information corrected
• have information erased (the “right to be forgotten”)
• receive your data (data portability)
• object to or request restriction of the processing
• withdraw consent you have given

Contact us at post@erken.no to exercise these rights. You also have the right to lodge a complaint with the Norwegian Data Protection Authority.

7. Cookies

We use only necessary cookies. The details are on the cookies page.

8. Changes

We may update this policy. The current version is always available here, with the date of the latest change at the top.

9. Contact

Data controller: Desken AS (company reg. no. 984 358 202 MVA). Inquiries: post@erken.no.