Privacy and data policy
What Nordic Crypto stores about you, which outside services see your requests, why, and for how long. In short: no advertising, no tracking cookies, no third-party fonts, and nothing is sold. Each part below says whether it is switched on today.
Denne side er skrevet på engelsk og norsk. Kort sagt: ingen reklamer, ingen sporingscookies, og intet bliver solgt. Hver del nedenfor siger, om den er slået til.
Who is responsible#
Nordic Crypto (nordiccrypto.no and the country addresses nordiccrypto.se, .fi, .dk and .is) is run by Jørgen S. Notland (jQrgen), Oslo, who is the controller under the GDPR. To ask about your data, open an issue at github.com/jQrgen/nordic-crypto/issues. Issues are public, so do not write personal information there; ask to be contacted and we will reply privately. You can also complain to Datatilsynet, the Norwegian Data Protection Authority, or to the authority where you live.
This page covers the website. Last updated 9 October 2026. Changes are listed in the changelog and in the public source code.
Overview#
- Hosting (GitHub Pages; Cloudflare for the country addresses): on.
- Settings in your browser (language, light or dark): on, only when you use them.
- Market prices from Firi and Coinmotion, on the markets page: on.
- Talk videos (YouTube, Vimeo), only after you press play: on.
- Visitor stats (Cloudflare Web Analytics): Ikke slået til endnu
- Language guess from your country: Ikke slået til endnu
- Newsletter by email: Ikke slået til endnu
- Browser notifications: Ikke slået til endnu
- Private tips: Ikke slået til endnu
- Shoutbox: Ikke slået til endnu
Not used at all: advertising, advertising or social-media trackers, Google Analytics, Telegram or X widgets, third-party web fonts (our fonts are served from this site), script libraries from a CDN, and photos hotlinked from newspapers. Links to Telegram, X, GitHub and TestFlight are plain links; those services see you only if you follow the link, and then their own privacy terms apply.
Hosting and server logs#
What. The pages are static files on GitHub Pages. When your browser loads a page, GitHub receives the request with your IP address and browser details. GitHub states that it logs the IP address of visitors to GitHub Pages sites for security purposes. We cannot see those logs.
Country addresses and old address. nordiccrypto.se, .fi, .dk and .is go through Cloudflare, where a small Cloudflare Worker serves the same pages under that address. The Worker does not store or log anything (Workers logging is off). cryptonordic.no is redirected by Cloudflare to nordiccrypto.no. nordiccrypto.eu is forwarded by Domeneshop AS (Norway).
Why and legal basis. Delivering the site and keeping it secure: legitimate interest (GDPR Art. 6(1)(f)).
How long. Decided by GitHub and Cloudflare under their own terms. We keep no server logs ourselves.
Who and where. GitHub, Inc. (USA) and Cloudflare, Inc. (USA). Both take part in the EU-U.S. Data Privacy Framework and use standard contractual clauses, so data may be processed outside the EEA on that basis.
Cookies and storage in your browser#
The site sets no cookie unless you choose a language yourself. Everything below stays in your browser and is not sent to us. You can delete it in your browser settings at any time.
nc_lang(cookie, one year, this site only) andnc_lang(local storage): the language you picked in the language menu. Set only when you pick one.nc_auto(session storage, until the tab closes): stops the front page from switching language more than once.nc-theme(local storage): light or dark, set only when you press the switch. The office screen mode uses the same key.nc_push_countries(local storage): the countries you chose for browser notifications, when that service is on.nc_shout_nick(local storage): your shoutbox nickname, when the shoutbox is on.
These are needed for a function you asked for, so they need no consent banner. None of them is used to track you.
Language guess from your country#
Status: Ikke slået til endnu
What. Only on the English front page, only on your first visit and only when you have not picked a language: your browser asks our Cloudflare Worker which country the connection comes from. Cloudflare already knows that from your IP address and the Worker answers with a two-letter code (for example “NO”). Nothing is stored or logged. While this is off, or if the Worker does not answer within 1.5 seconds, the site uses your browser’s language setting instead, which never leaves your browser.
Why and legal basis. Showing the site in a language you probably read: legitimate interest (Art. 6(1)(f)).
Who and where. Cloudflare, Inc. as processor (see Hosting for transfers). No other geo-IP service is used.
Visitor stats#
Status: Ikke slået til endnu
When it is on, each page loads a small script from Cloudflare Web Analytics (static.cloudflareinsights.com). It sets no cookies. Cloudflare turns page views into aggregate counts, and we publish only daily, weekly and monthly totals. The details (what is collected, legal basis Art. 6(1)(f), about six months at Cloudflare, Cloudflare, Inc. as processor) are in the data policy on the stats page.
Market prices#
What. While the markets page is open, your browser asks the public price APIs of Firi (api.firi.com) and Coinmotion (api.coinmotion.com) for new prices about every five minutes. Those exchanges receive your IP address and browser details with the request. No cookies are sent and no referrer tells them which page you came from. Other prices come from files on this site.
Why and legal basis. Showing up-to-date prices: legitimate interest (Art. 6(1)(f)).
Who, where and how long. Firi AS (Norway) and Coinmotion Oy (Finland), inside the EEA, under their own privacy terms. We receive nothing about you from them.
Talk videos#
What. The talks page loads no video player until you press play. Then the player is loaded from youtube-nocookie.com (Google) or player.vimeo.com (Vimeo). From that moment the video service receives your IP address and browser details and may store data in your browser, under its own terms. Otherwise the link opens the video on the platform.
Legal basis. You start it yourself (Art. 6(1)(a) and (f)).
Who and where. Google LLC and Vimeo, Inc., USA (outside the EEA), under their own privacy terms.
Newsletter by email#
Status: Ikke slået til endnu
What. The signup form sends your email address to our own Cloudflare Worker. We store the address, the site language, the status (pending, confirmed or unsubscribed), a hash of the confirmation link and the times. We do not store your IP address or browser details, and the list is not on GitHub.
Why and legal basis. Sending you the newsletter you asked for: your consent (Art. 6(1)(a)), given with the checkbox and confirmed by email.
How long. An address that is not confirmed within 7 days is deleted. A confirmed address is kept until you unsubscribe with the link in every mail. After that we keep only the address marked as unsubscribed, so it is never mailed again. The list is used only for this newsletter and is never sold.
Who and where. Cloudflare, Inc. stores the list (Cloudflare D1). The mail is delivered by one email provider, Resend or Mailgun. We will name the one we use here before signup opens. Both are US companies, so transfers outside the EEA rely on their data processing terms.
Browser notifications#
Status: Ikke slået til endnu
What. Only if you press the button and allow notifications. Our Cloudflare Worker then stores the push subscription your browser gives it (an address at your browser maker’s push service and two encryption keys), the page language and the countries you chose. No name, no email address and no IP address. The messages travel through your browser maker’s push service (for example Google, Mozilla, Apple or Microsoft).
Legal basis. Your consent (Art. 6(1)(a)).
How long. Until you turn notifications off with the same button, or until the push service tells us the subscription no longer exists. Both delete it.
Who and where. Cloudflare, Inc. (Workers KV) and your browser’s push service, which may be outside the EEA.
Private tips#
Status: Ikke slået til endnu
We do not take tips in public GitHub issues. The tip page opens only when the private inbox below is ready.
What. The tip text, any links you add, an optional way to contact you, the page language and the time, stored in a private database on our Cloudflare Worker. Your IP address is not stored. To limit abuse, the Worker keeps a hash of your IP address with a random value that changes every day, for ten minutes. Before sending, Cloudflare Turnstile checks that you are a person; it runs only on that page. The editors may forward a tip to their own private newsroom inbox.
Why and legal basis. Receiving and checking news tips: legitimate interest (Art. 6(1)(f)), as part of journalism (Norwegian Personal Data Act § 3).
How long. Until the editors have handled the tip and delete it. Tips and contact details are never published.
Who and where. Cloudflare, Inc. (Workers, D1, Turnstile); see Hosting for transfers.
Shoutbox#
Status: Ikke slået til endnu
What. If you post, we store your nickname, your message, the page language and the time, and show them to everyone. For rate limits, reports and bans we store a hash of your IP address with a random value that changes every day; the raw IP address is not stored and the day’s value is deleted the next day. Cloudflare Turnstile checks that you are a person. The nickname is also kept in your browser.
Legal basis. Legitimate interest in running a reader chat and keeping it free of abuse (Art. 6(1)(f)).
How long. Messages stay until a moderator removes them. You can ask us to remove yours.
Who and where. Cloudflare, Inc.; see Hosting.
GitHub issues and contributions#
If you open an issue or contribute on GitHub, GitHub processes your account data under its own terms, and what you write there is public. We use issues for questions about the site, not for tips.
Your rights#
You can ask for access to, correction of or deletion of data about you, object to processing based on legitimate interest, and withdraw consent at any time (unsubscribe, turn notifications off). For most of the site we hold nothing that identifies you, so there is usually nothing to look up. Contact us as described under Who is responsible.