DRAFT: This text has not been reviewed yet and does not apply until it has been.
Privacy policy
Last updated 4 October 2026
This policy explains what personal data Lindgaard.net processes when you visit lindgaard.net or get in touch, why, and what rights you have.
Data controller
Lindgaard.net (org. no. 987 032 596) is the controller for the personal data processed on this website.
Address: Solstien 42, 8445 Melbu. Email: info@lindgaard.net.
The contact form
When you submit the contact form, I process your name, your email address and the content of your message.
The purpose is to answer and follow up your enquiry. The legal basis is the consent you give in the form (GDPR Article 6(1)(a)). You can withdraw your consent at any time by getting in touch.
The form is delivered through PostTo, a service operated by Lindgaard.net and hosted in the EU. The submission is stored in PostTo and forwarded to Lindgaard.net by email.
PostTo first checks every submission automatically for typical signs of spam. Only submissions that look suspicious after this check are passed on to Anthropic in the USA, which assesses whether they are spam. Ordinary enquiries are not sent there. The purpose is to keep spam out, based on legitimate interest (Article 6(1)(f)). This is the only transfer of data outside the EU/EEA on this website.
[TODO review: confirm the transfer basis (EU standard contractual clauses in Anthropic's data processing addendum, or the EU–US Data Privacy Framework) and how long Anthropic keeps submissions, and write it in here. Remove both paragraphs if AI filtering is turned off.]
Visitor statistics
I use Plausible Analytics to see how many people visit the website and which pages they read. Plausible uses no cookies and does not store IP addresses. Unique visitors are counted with an anonymous value that changes every day, so you cannot be followed from day to day or across websites.
The statistics are aggregated and cannot be linked to you. The legal basis is legitimate interest in understanding how the website is used (Article 6(1)(f)).
Server logs
The server that delivers the website records technical details about each request, including IP address, browser type, the address visited and the time. This is used for operations, troubleshooting and detecting abuse, based on legitimate interest (Article 6(1)(f)).
Cookies and consent
The website only uses cookies it needs to work, plus one that remembers your choice in the consent banner. No cookies are used for marketing or tracking.
The consent banner is provided by TreFemten, a service operated by Lindgaard.net. Your choice is stored in the tf_consent cookie and logged with time, choice and banner version, without your IP address, so that consent can be documented.
These are all the cookies the website sets. Plausible sets none.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| lindgaardnet-session | Lindgaard.net | Necessary. Keeps track of your session, among other things so the contact form works. | 2 hours |
| XSRF-TOKEN | Lindgaard.net | Necessary. Protects forms against forged submissions. | 2 hours |
| tf_consent | TreFemten | Necessary. Remembers your choice in the consent banner. | 12 months |
Data processors
These providers are used to run the website. They process data on behalf of Lindgaard.net. All except Anthropic process it within the EU/EEA.
- Hetzner Online GmbH (Germany): the server that delivers this website (data centre in Nuremberg), and the server that runs PostTo, where contact form submissions are stored (data centre in Frankfurt).
- Lettermint (EU): delivers the emails PostTo sends with the submissions.
- Plausible Analytics (Estonia): cookieless visitor statistics.
- BunnyWay d.o.o. (Slovenia): delivers the consent banner script through the bunny.net content delivery network, from EU/EEA nodes only. Your IP address is processed when the script loads.
- Anthropic PBC (USA): AI classification of submissions that may be spam, see the section on the contact form.
PostTo and TreFemten are operated by Lindgaard.net itself and are therefore not external processors.
Retention
- Contact form enquiries: deleted from PostTo after 30 days. The email with the enquiry is kept in the inbox for as long as needed to follow up.
- Server logs for this website: 30 days.
- Your consent choice (tf_consent): 12 months.
- Visitor statistics: kept only as aggregated numbers without personal data.
Your rights
You have the right to access the data I hold about you and to have it corrected or erased. You can ask for processing to be restricted, object to processing based on legitimate interest, receive your data in a portable format and withdraw consent.
Email info@lindgaard.net and I will reply within one month.
Complaints
If you believe your personal data is processed unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no). I would appreciate it if you get in touch first, so I have the chance to put it right.
Changes
This policy is updated when the processing changes. The date at the top shows when it was last changed.