Privacy Policy

This policy explains how Norrly ("we", "us") collects and processes personal data when you use norrly.com (the "Service"). Norrly is operated from Sweden and complies with the EU General Data Protection Regulation (GDPR).

1. Data we collect

• Account data — your email address and a hashed version of your password (we can never read your password). Legal basis: performance of contract (Art. 6.1.b GDPR).
• Subscription data — if you upgrade to Pro, payments are processed by Stripe. We store your Stripe customer and subscription identifiers, never your card details. Legal basis: performance of contract.
• Usage data on your device — your favorites, comments and cookie preference are stored locally in your browser (localStorage) and are not transmitted to us unless you use a share link, in which case the selection is encoded in the link you choose to share.
• Technical logs — standard server logs (IP address, timestamps, requested URLs) kept briefly for security and operations. Legal basis: legitimate interest (Art. 6.1.f GDPR).

2. What we do not do

• We do not sell or share your personal data with third parties for marketing.
• We do not use advertising or tracking cookies. See our Cookie Policy.
• We do not profile you or make automated decisions about you.

3. Processors

We use a small number of service providers to run Norrly: our hosting provider (server infrastructure) and Stripe (payment processing). They process data on our behalf under data processing agreements.

4. Retention

Account data is kept for as long as your account exists. If you delete your account, or ask us to, we remove your personal data within 30 days, except where we must retain records for accounting or legal reasons (e.g. invoices).

5. Your rights

Under the GDPR you have the right to access, rectify, delete and port your personal data, to restrict or object to processing, and to withdraw consent at any time. Contact us at hello@norrly.com and we will respond within 30 days. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se) or your local supervisory authority.

6. Contact

Data controller: Christopher Genberg AB (VAT: SE559185701501), Sweden. Email: hello@norrly.com — or use our contact form.