Effective date: July 23rd, 2026.
Controller: NorthBent (org. no. 936 497 969), Norway (“we”, “us”, “our”) — contact: hello@nornstory.com
This policy covers the Norn Story website and web app at www.nornstory.com (the “Website”). It explains what personal data is (and isn’t) processed when you use it. The desktop App is covered too, in the simplest possible way: it has no network features of ours, so nothing in it reaches us.
—————
1. Who is responsible
The data controller for the Website is NorthBent, a Norwegian legal entity. You can reach us at hello@nornstory.com.
2. What we do not collect
We do not collect, transmit, or store your content or personal data. Specifically, the Website contains no analytics, no advertising or tracking technologies, no error-reporting beacons, and no third-party fonts or embeds that would send your IP address elsewhere. We do not build profiles, we do not sell or share data, and we have no access to anything you create.
3. Your content stays in your browser
Projects and settings you create are stored locally in your browser, using IndexedDB and a small number of localStorage entries. This storage is strictly necessary for the Website to function and is used for no other purpose. It stays on your device until you clear it; we never receive it and cannot recover it for you.
4. Optional Dropbox sync
If you choose to connect Dropbox, the Website syncs your projects directly between your browser and your own Dropbox account, limited to a dedicated app folder (“Apps/Norn Story”). Authentication uses OAuth 2.0 with PKCE, and the resulting access tokens are stored only in your browser (IndexedDB “auth” store). Tokens and content are never sent to us. In this arrangement, Dropbox processes your data under its own terms and privacy policy as your service provider; connecting it is entirely your choice, and you can disconnect at any time in the Website or by revoking access in your Dropbox settings.
5. Hosting and technical logs
The Website is served as static files by Cloudflare (Cloudflare Pages/CDN). Like any host, Cloudflare processes standard request metadata at its edge — IP address, user agent, requested URL, timestamps — to deliver the site and defend it against abuse, and retains such logs for a limited period. This is the only server-side processing connected to the Website. Cloudflare acts as our data processor for this purpose.
6. Email contact
If you email hello@nornstory.com, we receive your address and whatever you write. We use it solely to reply. Correspondence is handled by Google (as our email provider and data processor) and kept for up to one year, after which it is deleted.
7. Legal bases
Where the GDPR applies, our legal bases are: legitimate interest (Art. 6(1)(f)) for the technical hosting logs in Section 5 and for handling correspondence in Section 6; and your own action for the browser storage in Section 3, which is strictly necessary storage under the Norwegian Electronic Communications Act (ekomloven § 2-7b) and requires no consent. Dropbox sync (Section 4) happens on your instruction, between you and Dropbox.
8. International transfers
Cloudflare, Dropbox, and Google are US companies. All three participate in the EU–US Data Privacy Framework and offer standard contractual clauses, which provide the safeguards the GDPR requires for transfers outside the EEA.
9. Your rights
Under the GDPR you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. In practice, we hold almost nothing: for your content, these rights are exercised on your own device or in your own Dropbox; for email, contact us and we will act on your request. You may also complain to the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no).
10. Retention
We retain no content (we never have it). Hosting logs are retained by Cloudflare for its standard limited period. Email is retained as described in Section 6.
11. Changes
We may update this policy. The current version, with its effective date, is always available on the Website. Material changes will be indicated by an updated effective date.
—————
Contact: hello@nornstory.com