Privacy
What is stored about you
In short: you can read the whole site without leaving anything about yourself behind. There is no tracking, no analytics and no advertising here. If you choose to send me a message, what you write is stored — so that I can reply to you.
If you send a message through the contact form
Your name, email address and message are then stored. The information is used for one thing only: replying to you. You also receive an email receipt confirming that the message arrived.
If I reply, the reply is stored together with your message. The email you receive contains a personal link to the conversation, where you can read everything that has been written and reply further. What you write there is stored in the same place. That way I have the whole correspondence in one place, and can give you a complete copy if you ask for it. If you ask for your message to be deleted, the whole conversation is deleted with it.
The link to the conversation is secret and applies only to your enquiry. It cannot be found by searching, and nobody can find it without getting it from you.
None of this is shared with others, sold on or used for marketing. You will not end up on any list. The message is deleted once your enquiry has been dealt with, and you can ask for it to be deleted before then at any time. The processing is based on a legitimate interest in being able to reply to enquiries, under Article 6(1)(f) of the General Data Protection Regulation.
When you only read
The site collects nothing about you beyond what you write in the contact form yourself. There are no analytics tools, tracking pixels or ad networks here. If you leave the form alone, I have nothing about you.
The only cookie a visitor can get remembers the language choice. If you switch language in the menu on the front page, the choice is stored in your browser for one year so you do not have to choose again. It is necessary for the choice to be remembered, is not used for tracking or marketing, and is read only by this site.
As with any website, the hosting provider — Vercel — records technical information about the request itself, including IP address, time and which page was requested. This is part of delivering and securing the service, not because I collect it, and I do not use it to identify you or for any other purpose.
If someone sends an unusually large number of form messages in a short time, the site counts submissions per IP address to stop spam. That count is kept only in memory, is not stored anywhere, and disappears on its own.
Who processes the information
The site is hosted by Vercel, the database is with Neon, and email is sent through Proton. They process information on my behalf, and only to the extent the service requires. Logging in to my own admin panel happens through GitHub, and applies to nobody but me.
About LinkedIn
The CV on this site is taken from my own LinkedIn profile, with my own consent. It concerns my information only. Nothing about you is sent to LinkedIn, and the site has no LinkedIn buttons, embedded content or tracking from there. LinkedIn never learns that you have visited.
Which rules apply
The processing follows the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act. Norwegian law applies, and the Norwegian Data Protection Authority (Datatilsynet) is the supervisory authority. The site is designed to comply with Norwegian and European rules, and not with privacy rules in other countries.
Your rights
If you have sent me a message, you can ask for access to it, have it corrected or deleted, and object to the processing. Send an email to post@magnusni.no and I will sort it out as quickly as I can — if you ask for access, you will get a complete copy of everything stored under your address. If you believe anything here breaks the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).
Who is responsible
Magnus Nilsen is the data controller for this site. Questions about privacy go to post@magnusni.no.