Privacy

Who is responsible?

DAVA ENK is the data controller for skoleplass.no. Contact hei@skoleplass.no about privacy and your information.

Server logs and page counts

The server receives your IP address when your browser connects. The prepared log configuration records time, method, path, status code, response size and response time, without IP addresses, browser identifiers or search text in the URL. Older sharing codes and email-shaped paths are masked. Provisional periods are 14 days for access logs, 30 days for error logs, 30 days for system logs and 30 days for scheduled-job logs. Critical error logs may contain request data and must have restricted access. The owner must approve the periods and verify logging, rotation and actual deletion before publication; production operation is unconfirmed.

We count requests, not people

Our own tool aggregates requests by UTC day, page template and status group. A school page is counted as /skole/:kommune/:slug. Counts contain no IP address, User-Agent, school name or text you type. No analytics request is sent from your browser. The daily counting job is prepared; production operation has not been confirmed. There is no fixed deletion period for these aggregate counts without visitor identifiers.

Protection against overload

The request limiter uses a keyed hash of your IP address. It can distinguish requests and is not anonymous. The database stores hashes, counters and expiry times; the old additional counters holding IP addresses in memory have been removed. The IP address is used briefly to derive the key. A counting window expires after at most 1 hour. Cleanup is prepared every 1 hour and daily. The provisional target is physical deletion within 25 hours after expiry, provided jobs run, are monitored and failures are resolved. Active windows can be renewed. This is not a verified production deletion period. Deleting database rows does not also delete backups. The limiter is not used for statistics and sets no identifier on your device.

Storage on your device

We do not set cookies. My schools is saved only when you choose to save a school. You can remove schools in My schools or clear site data in your browser. The table shows only storage currently in use. Older reminder data is removed on the next page visit when the browser permits storage access. Old searches, grades, visits and display choices are removed when a normal page opens, if the browser allows access. We do not use a dedicated service-worker map cache. Your browser’s ordinary cache may contain public page and map files.

Your address and links you share

Your selected address is used in memory and after # in the URL, including when comparing two addresses. Text or an address ID is sent in private POST lookups to our server and on to Kartverket when needed. Your IP address is not forwarded. Lookups may remain in server memory for up to 15 minutes but are not written to logs or persistent storage. Your browser does not send # to the server as part of the URL. Anyone receiving the full link can still read this part; remove the address and score before sharing if you want to keep them private. A postcode you enter is sent in a private POST lookup to find the postal area and municipality. It is not used to infer your home or school catchment.

When you contact us

Contact-form delivery is to remain off at launch. The form processes your name, email address, message and any school reference, but without configured delivery you receive an error and the message is not sent. Contents are not stored in the app database or logs. The Resend adapter is prepared; the owner must approve the provider, transfer and contact mailbox before activation. For enquiries you send directly to the contact mailbox, proposed retention is 12 months from receipt. The period, access and actual deletion are unconfirmed. Do not send sensitive information or information about children.

The newsletter is not enabled

Sign-up is hidden and the real delivery service is not enabled. The prepared sign-up requires your consent, chosen topics, optional municipality and confirmation that you are at least 13. Children under 13 are directed to an adult; no birth date is collected. We store your email address, choices, language and consent and confirmation times. Opening a confirmation link does not subscribe you: you must press Confirm. The link and unconfirmed sign-up expire after 48 hours. Confirmed sign-ups are retained for 12 months after confirmation. Aggregate sending counts are retained for 13 months. Expired entries are removed by the daily deletion job, which must be enabled with the service. Unsubscribing deletes the sign-up; use the email link or contact us. We do not track opens or clicks. The provider’s email logs have a separate retention period.

Calculator

Grades remain only in memory while the calculator is open. The score is held in memory and after # in the URL. When admission cutoffs are fetched, the chosen county is sent to the server, not the score or grades.

My schools and older sharing links

New sharing links contain only your chosen schools in the URL. School choices are sent to the server to retrieve public school data. Older sharing codes can still look up school choices in the database until they expire. The original links are valid for at most 90 days, and expired codes are cleared by a daily job. No new codes of this kind are created. The job is prepared; actual production execution and deletion must be verified.

Your rights

Contact hei@skoleplass.no to request access, correction or deletion of personal data, to object or to request restricted processing. You can withdraw consent and request a copy of your data where applicable. You can complain to Datatilsynet, the Norwegian Data Protection Authority. See also our terms and how we use public school data.

Backups

The proposal is daily database backups retained for 35 days, with no separate long-term copies. Deleted database information may remain in older copies until those copies are deleted. After a restore, deletions must be reapplied before reopening the service. The period is provisional; the owner must verify actual deletion, storage location and access, including transaction logs and other copies. These are not automatically covered by the app’s deletion jobs.

Information about schools

We use public school data, including contact details from Nasjonalt skoleregister. The register may contain the principal’s name and email address; the principal’s name may appear on school posters. School contact fields and photographer credits may also identify people. These are not pupil records. We label suppressed results and do not make individual pupil responses available. Information is updated from sources or following corrections; no separate fixed deletion period for principal details has been implemented. Contact us about errors or deletion requests.

What we process and what we do not collect

• Push notifications and the Find vgs wizard have been removed. We do not collect push subscriptions or wizard answers. Deletion of older server data has not been confirmed.
• When you submit a school photo, we store the photo with location and other file metadata removed, your chosen permission and the photographer’s name. It appears only after review. Optional email addresses are deleted when the photo is approved or rejected. Rejected photos and submissions become eligible for the prepared deletion job 30 days after rejection. Actual production execution must be verified. Approved photos and credits are retained while in use. Pending submissions remain until processed. Contact us to withdraw a limited permission. CC BY 4.0 cannot be revoked for uses already permitted by the licence. Approved originals are retained privately for recovery without a fixed deletion period.
• We do not load browser analytics, session replay or external error reporting in your browser.
• We do not set cookies.
• We do not store a history of the schools you visit or searches you type on your device.
• We do not save your address in persistent browser storage.
• Page counts contain no IP address, browser identifier or text you type.

Other providers

• ladr.no

  Map server operated by the owner of Skoleplass

  Your browser fetches map files directly from the owner’s server. It receives your IP address and technical request data, but not the address you type as a separate search field. The map viewport may reveal the area you are viewing.

• Kartverket / Geonorge

  Address lookup through our server

  We send address text or an address ID to find coordinates, not your IP address. Lookups go through our server. Address data is used for the lookup, not profiling.

• Resend

  Contact and newsletter delivery are not enabled

  The planned sending region is Ireland (eu-west-1), with open and click tracking off. Resend states that data is stored in the US even with an EU sending region. Standard email and log retention is 30 days on Free, Pro and Scale. The agreement, transfer basis, actual setup and deletion must be reviewed before activation. This does not confirm EU storage or that delivery is operating.

• Hetzner

  Planned EU hosting

  The app and database are to be hosted by Hetzner in the EU. The operator must confirm the actual region, access, backups and deletion periods before launch.