Privacy Policy & Cookies
This page gives a practical overview of how Norwegian Saunas handles cookies and basic analytics. If the site is run by a registered company or sole proprietorship, this page should also include the correct legal entity name and contact details for the data controller.
Who Is Responsible
Norwegian Saunas is an independent website about public saunas in Norway. The site owner acts as the data controller for the limited personal data processed through the website.
Before launch or commercial use, this section should be completed with the correct controller details, such as business name, organization number, and contact email.
What We Collect
Most visitors can browse the website without giving personal information directly. The site may still process limited technical data such as browser type, device type, pages viewed, and approximate location derived from IP-based analytics if analytics consent is granted.
How We Use Cookies
Norwegian Saunas uses a minimal cookie setup. Analytics cookies are optional and only load if you accept them through the cookie banner.
Essential Cookies
Public pages do not rely on tracking cookies to work. The only essential cookie in this project is the admin session cookie used for the protected admin area.
- `admin_session`: keeps authenticated admins signed in to the admin area.
- `ns_cookie_consent`: stores your analytics preference so we do not ask on every page view.
The legal basis for these cookies is legitimate interest in keeping the website secure and remembering your consent choice.
Analytics Cookies
If you accept analytics, the site loads Google Analytics to help us understand which pages are useful and where people discover the site.
- `_ga`: distinguishes visitors for analytics reporting.
- `_ga_*`: stores session-related analytics state for Google Analytics.
The legal basis for analytics cookies is consent. Analytics is not activated unless you actively accept it.
What We Track
When analytics is enabled, we collect aggregated information such as page views, approximate device/browser information, and general traffic patterns. We do not use advertising cookies or personalization cookies.
Third Parties
If analytics is accepted, usage data is processed through Google Analytics. That means Google may act as a processor or independent recipient depending on your configuration and Google’s own product terms.
If this site is intended to be fully compliant for production use, the Google Analytics property settings, retention period, IP handling, and any required data processing terms should be reviewed in the Google account itself.
International Transfers
Some analytics processing may involve transfers outside Norway or the EEA, depending on Google’s infrastructure and settings. If this is relevant to your operation, the site owner should verify that the transfer mechanism and provider terms are acceptable for the intended use.
Storage And Retention
The consent cookie is stored so your choice can be remembered for future visits. Analytics retention is controlled in your Google Analytics property settings and should be reviewed there directly.
Managing Consent
You can change your choice at any time by using the Cookie Settings link in the footer. Rejecting analytics prevents Google Analytics from loading on future page views.
Your Rights
If GDPR applies to your use of the site, visitors may have rights relating to access, correction, deletion, restriction, objection, and withdrawal of consent. In practice, those rights should be handled by the site owner through the controller contact details listed on this page.
Contact And Next Step
To make this policy fully complete, add the real controller details here:
- Legal name or company name
- Organization number if applicable
- Contact email for privacy requests
- Postal address if relevant for your setup
For general visitor questions, you can also direct people to the public contact page.
If you want this text turned into a stricter business-ready privacy policy, it should be reviewed together with your actual legal entity, analytics settings, and any future integrations.