Privacy policy

Last updated 30. juli 2026

IT-samleren is built to collect as little as possible about you. You need no account, we use no cookies, and we have neither tracking, profiling nor ads. This policy explains what we still process, why, and your rights under the GDPR.

Controller

Vassbrekke AS owns, operates and hosts IT-samleren, and is the controller for personal data processed on the site.

• Vassbrekke AS
• Organisation number: 835 834 212
• Address: Stølevegen 55, 5514 Haugesund
• Email: contact@vassbrekke.no

What we process

• Operational logs. The web server stores technical logs of requests: IP address, timestamp, page fetched, status code and user agent.
• Temporary abuse protection. To stop overload we count requests per IP. Counts live only in server memory for up to one minute and are never written to disk.
• Email. If you write to us, we process the content and your address to reply.

We do not collect names, contact details or behavioural data about visitors, and we do not combine data into profiles.

Purpose and legal basis

Logs and abuse protection are processed to deliver a secure and stable service, troubleshoot and prevent attacks. The legal basis is legitimate interest, GDPR Art. 6(1)(f). We consider that the interest in secure operations outweighs the privacy impact, because the data are few, short-lived and never used to follow individuals. Email is processed on the same basis to answer your enquiry.

Retention

• Operational logs: deleted within 14 days.
• Abuse protection: disappears automatically after one minute.
• Email: deleted when the enquiry is finished.
• The article database holds only headlines, summaries and links from publishers' feeds — no data about you as a reader.

Cookies and language

We use no cookies, tracking pixels or analytics tools. Therefore we do not ask for consent for such tools. Language can be chosen with ?lang=nb or ?lang=enin the URL. Without that, we may pick Norwegian or English for that response from your browser's Accept-Language header and, if the reverse proxy sends it, a country code derived from your IP. Neither choice is stored as a cookie or profile.

Search

Your search terms are part of the URL and are used only then to find results. They are not stored in our database, but may appear in operational logs like other URLs.

Images from publishers

Article images load directly from publishers' own servers so images appear as the publisher publishes them, and so we do not store copies of others' content. Your browser contacts those sites when you view the list, and they may see your IP, time and which image was fetched. Some use CDNs with servers outside the EEA. That contact is between your browser and the publisher; we neither control nor receive those data. To avoid it, block images in the browser — the site works fine without them. If you click through to a story, that site's privacy policy applies.

Who can access the data

Vassbrekke AS operates and hosts the service on servers in Norge. We use no external processors for analytics, advertising or cloud storage of visit data, and we do not sell or share data with third parties. Data are disclosed only if we are legally obliged to.

Transfers outside the EEA

We do not transfer personal data out of the EEA. The only exception is the contact your browser itself makes with publishers' image servers, as described above.

Your rights

Under the GDPR you may ask for:

• access to data we process about you
• rectification of inaccurate data
• erasure
• restriction of processing
• to object to processing based on legitimate interest
• data portability where applicable

Email contact@vassbrekke.no, and we normally reply within 30 days. Note that we usually cannot link an IP in the logs to you as a person unless you provide it, and we do not collect extra data just to identify you.

Complaint to the Data Protection Authority

If you believe we process personal data unlawfully, you may complain to the Norwegian Data Protection Authority (Datatilsynet). We appreciate if you contact us first so we can fix issues.

Security

Traffic is encrypted with TLS, and the site uses strict browser security settings to prevent injection of foreign code. Because we store so little, there is also little that can go astray.

Changes

If we change how the service processes data, we update this page and the date at the top.