Skip to content

Draft: to be reviewed by a lawyer before launch.

Privacy

The calculator on these English pages runs in your browser, and the numbers you enter never leave your device. This page describes the website, processing when you use an account or invitation, and services that remain planned.

Data controller

Fri Vei AS, org. no. 934 748 468, Kobbervegen 1A, 4820 Froland. Questions about privacy can be sent to contact@draupne.net.

What applies today

The calculator

The free calculator runs entirely in your browser. The numbers you enter are not sent to us or anyone else, and we do not log them.

Storage on your device

Your simplified calculator numbers can be remembered in localStorage on this device. Older generic-calculator numbers remain under their previous key and are not loaded into this simplified model. “Forget my numbers” deletes both sets. You can also clear the browser's data yourself. If you choose Light or Dark appearance, only that preference is saved locally under draupne.theme. Choosing System removes the saved appearance preference and follows your device's setting.

A cookie for your choice of country

If you choose a country in the menu or at the bottom of the page, we set one functional cookie, draupne_market. It remembers your choice for one year and holds nothing else. If you do not choose, it is not set.

Hosting by Cloudflare

The site is delivered by Cloudflare, Inc. (data processor) from Cloudflare's global network, normally from a data centre near you. Cloudflare processes your IP address and technical details of the request to deliver the page and protect it from abuse, and technical logs are kept for a limited period. We also count page views with Cloudflare Web Analytics. It uses no cookies, and we see only totals, for example how many people visit each page, never who you are. Draupne sets no cookies of its own on these pages, unless you choose a country (see above), and shows no consent banner. Cloudflare's protection against abuse, including Turnstile below, may set a short-lived security cookie for that check.

Protecting the waitlist from abuse

Cloudflare Turnstile, from Cloudflare, Inc. (which also hosts the site), checks in the browser that a person and not a program is signing up to the waitlist. Cloudflare then processes your IP address and technical details about the browser and device. Your email address is not sent to Turnstile.

The waitlist at Supabase

Supabase, Inc. (EU, Stockholm) is the data processor for the waitlist. It holds your email address, your language, when you gave consent and your queue number, and, if you answered, where you heard about us. When the form shows the country field, it also holds which edition of the site you signed up on and, if you chose one, your country. Your country is used only for the one email about the planned version for your country, and to count, in total, which countries people ask for. We remove you from the waitlist when you ask.

Accounts and invitations

This describes processing when you use Google sign-in or a personal invitation to the Norwegian preview. Data is processed only when the relevant feature is used; this description does not mean every feature is open. Premium on the English edition remains planned.

When you sign in with Google

Google (Google Ireland Ltd./Google LLC) receives information that you sign in to Draupne, along with technical IP address, browser and sign-in information. Google processes this under its account and privacy terms. Supabase receives your verified identity, email address, Google identifier and standard profile information. We request only standard identity scopes (openid, email and profile), no access to email or contacts, and do not retain Google API tokens. Financial plan data is never sent to Google. Sign-in is independent of Google Analytics consent.

Accounts and sessions at Supabase

When you use an account, Supabase, Inc. (data processor, EU, Stockholm) processes identity, email address, Draupne user ID and sign-in sessions. Sign-in is remembered on your device under draupne.auth in the browser’s localStorage; temporary information for secure sign-in is held in sessionStorage. Administrators also use an authenticator app, and Supabase stores the factors and sessions used for that check. Ordinary Draupne accounts do not require an authenticator app. This processing concerns identity and access, not financial plan data.

Complimentary membership

When you receive complimentary membership, Supabase stores your email address, a neutral internal note and the time you were added, for as long as membership lasts or until the account is deleted. Your account export includes your membership information.

When you receive and open an invitation

When a personal invitation is sent, Resend, Inc. processes the recipient’s email address and message containing the invitation link, never financial plan data. Resend stores data in the USA; the transfer is covered by Resend’s data processing agreement. We use no open or click tracking in invitations. Supabase stores only the invitation hash, membership reference and creation and expiry times, not the raw invitation key. An invitation lasts up to 30 days and is removed with membership. Opening it uses the strictly necessary draupne.invite cookie for preview access until the invitation expires. Access is checked against active membership on each visit. A shared preview code may use draupne.preview for up to 30 days. These access cookies are separate from account sign-in.

Internal waitlist notifications

When you join the waitlist, Resend may send one short email to our operations address (contact@draupne.net). Your email address and language may appear in that internal message. We do not send you a welcome email through Resend. Resend stores data in the USA; the transfer is covered by Resend’s data processing agreement. The numbers you enter in the calculator are never included.

Administration history and erasure

When an administrator adds, removes or re-invites a member, Supabase stores the action, time, administrator user ID and recipient email and associated verified user ID. This history has no automatic expiry while Draupne operates. Ordinary membership removal preserves it. Verified account erasure removes identifying information and associations while retaining the action and time. Your export includes actions associated with you with other people’s identities hidden. If you received an invitation without creating an account, you can contact us about erasure; your identity is verified before the information is removed.

Planned, not in use yet

The services below are not in use. We add services to this page before they start.

  • Pre-orders (not open yet): Link, Stripe's checkout (Stripe Managed Payments), is the seller of record. It takes the payment, handles VAT, sends the receipts and handles refunds, and it processes your name, email address, billing address and payment details; we never see your card details. Supabase, Inc. (EU, Stockholm) holds the purchase record for us: your email address, Stripe's customer and subscription ids, the edition and price step of your place, its status and any refunded amount. We use it to keep your price, count the places and handle withdrawals and cancellations. Stripe's checkout uses cookies that are strictly necessary for the payment.

Your rights

Under the General Data Protection Regulation (GDPR) you can ask to see the information we hold about you, ask for it to be corrected or deleted, and complain to the Norwegian Data Protection Authority (Datatilsynet) or the data protection authority where you live. Contact us at contact@draupne.net.