This policy covers aslakmyhre.no and every app on its subdomains: They are run by me, Aslak Myhre, and I am responsible for the personal data they process.

The short version: there is no tracking, no advertising, and no account to create. The files, recordings and projects you work with stay in your browser. The few exceptions are listed below.

Every site

Hosting (Vercel)

The sites are hosted on Vercel. Every request passes through their servers, which log technical details such as your IP address, browser, and the address requested, to run and secure the service. See Vercel's Privacy Policy.

DNS (domeneshop.no)

domeneshop.no answers the lookups that turn aslakmyhre.no into a server address. See domeneshop.no's Privacy Statement.

Cookies and browser storage

No cookies for tracking, analytics or marketing. Nothing stored in your browser is sent anywhere.

• theme stores a single cookie to save between apps and sessions. Lasts 1 year.
• analytics_session, only if you sign in to Analytics. See that section below.

Two apps also save to your browser's local storage, which stays on your device and is never sent to a server:

• PDF Reader keeps its settings: the split between panes, auto-scroll, reading speed, language and voice.
• Image Editor keeps your current project, including the images you imported, your recent colours, and the toolbar size.

Clearing this site's data in your browser removes all of it.

Tuner

The tuner asks for your microphone. Clien-side recording, nothing published. While listening, the tuner asks your device to keep the screen on, involves no data.

PDF Reader

The PDF is read client-side,uploaded. It also asks your device to keep the screen on while reading aloud.

Reading aloud uses the voices your browser or operating system provides. Most of them run on your device, picked by default. Some browsers offer online voices, if you choose one, the text being read is sent to that voice's provider, usually the maker of your browser or operating system, under their terms.

Image Editor

Images you import are handled in your browser and never uploaded. Your project is autosaved to your browser's local storage, as described above. The Clear action removes every layer, and with it the saved images.

Day Trips

Day Trips finds places worth visiting around a point you choose. It talks to more outside services than the other apps, so this section sets out which, and what each of them sees.

Your location

If you use the button that searches near you, your browser asks for your permission and then gives the site your device's coordinates. They are sent to this site's server for that one search, and never stored in its database or linked to you. Like any request, the search does pass through the hosting logs described above. Typing a place name instead means your location is not shared at all.

Place search and descriptions

Turning a place name into a point on the map, finding what lies around it, and fetching descriptions are done by this site's server, using Nominatim and the Overpass API (OpenStreetMap data) and Wikipedia. Because the server makes these requests, those services receive the search term or coordinates but not your IP address or anything else that identifies you. See the OpenStreetMap Foundation's Privacy Policy.

Map tiles (CARTO)

The map background is fetched by your browser directly from CARTO. CARTO therefore sees your IP address, your browser, and which parts of the map you view, which shows roughly where you are searching. See CARTO's Privacy Notice.

Photos (Wikimedia)

The photos beside results are loaded by your browser directly from Wikimedia's servers, so Wikimedia sees your IP address and browser and which photos were shown. See the Wikimedia Foundation's Privacy Policy.

Links out

A result's directions link opens Google Maps with that place as the destination, and its website link opens the place's own site. Nothing is sent to either until you follow the link, and from then on their privacy policies apply.

What the database holds

Day Trips keeps a database of public map data only: places from OpenStreetMap, their Wikipedia descriptions, and a record of which areas have already been fetched, so a repeated search is fast. It holds no accounts, no search history, no IP addresses, and no personal data of any kind.

Analytics

Analytics asks you to sign in. It has a few fixed accounts and no way to create another, so there is nothing to register and no personal detail to give.

Signing in sets a cookie. It is strictly necessary. Lasts 7 days

Passwords are stored only as one-way scrypt hashes in the deployment's configuration. Sign-in attempts are not recorded by the app, and there is no database and no record of what you look at while signed in.

Legal basis

Hosting logs are processed on the basis of legitimate interest in running and securing the sites (GDPR article 6(1)(f)). Your location is used only with the permission you give in your browser. The two cookies are set only in response to something you do, choosing a theme or signing in, and exist solely to provide what you asked for.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data held about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to its processing
• receive your data in a portable format

These sites store almost nothing about you themselves, but if you want to exercise any of these rights, email me. You may also complain to the Norwegian Data Protection Authority, Datatilsynet.

Contact

Questions about this policy or your data: aslak@aslakmyhre.no

Changes

When what these sites do with data changes, this page changes with it, and the date at the top moves.