Privacy Policy
Last updated: May 2026
1. Who we are
SamfunnPrep is an online service for preparing for the Samfunnskunnskapsprøven in Norway. This privacy policy explains how we collect, use, and protect your personal data.
2. What data we collect
We collect the following information: email address and display name during registration, phone number when received through Vipps payment identity data, answers to practice questions and exam simulations, progress and statistics per category, subscription information and payment history (without card details), and technical data such as IP address, browser type, and device information.
3. Why we collect data
We use your data to create and manage your account, store your progress and provide personalized recommendations, process payments and manage subscriptions, improve the service based on anonymous usage statistics, and send important information about your account.
4. Legal basis
We process your personal data based on: contract — to deliver the service you registered for (GDPR Art. 6(1)(b)), consent — for analytics and cookies (GDPR Art. 6(1)(a)), and legitimate interest — to improve and secure the service (GDPR Art. 6(1)(f)).
5. Third parties
We use the following processors and recipients where needed to run the service: Supabase for database and authentication, Stripe and Vipps for payments, Resend for transactional email, Anthropic for admin-only article translation, Plausible for EU analytics, and, if you consent, Google Analytics/Ads, Meta Pixel and Microsoft Clarity. Some providers are US-based and rely on the EU-US Data Privacy Framework, SCCs or equivalent transfer safeguards.
6. Storage and security
Your data is stored in Supabase data centers in the EU. We use encryption (TLS) for all communication. Passwords are hashed with bcrypt. Payment card data is handled by Stripe and is not stored by SamfunnPrep. Learning sessions are retained for up to 3 years, detailed answers for up to 2 years, activity logs for 90 days, and payment event records for up to 7 years where accounting documentation is required.
7. Your rights
Under GDPR, you have the right to access your data, rectify inaccurate information, erase your account and all associated data, download your data in a machine-readable format, and withdraw consent for analytics and optional cookies. Use the account settings export and delete features, or contact us to exercise your rights.
8. Cookies
We use necessary cookies for authentication, security, language preferences and consent storage. Analytics cookies and tracking technologies are optional and separate from marketing cookies. They are loaded only after your specific consent, and you can change your choice on the cookies page at any time.
9. Changes to this policy
We may update this privacy policy as needed. Significant changes will be communicated via email or a notice in the service.
10. Contact
Questions or privacy requests? Contact privacy@samfunnprep.no. We normally respond within 30 days.
AI assistant in the newsroom
Admin editors can use AI tools for headlines, outlines, keywords, readability, source checks, and tone review. Inputs entered into those tools are sent to Anthropic for processing. Editors must not submit personal data, secrets, or unpublished sensitive source material to AI tools.