Privacy

This site has no login, no cookies and no tracking. The only thing stored is a server log, which is deleted after 30 days.

Who is responsible

kartoffelclan.com is run by Øyvind Sandåker, who is the controller for personal data on the site. Questions about privacy go to oyvind@zoney.no.

When you visit

No cookies, no analytics from others and no tracking. Nothing is stored in your browser.
The server logs every request (time, your IP address, the page you asked for, your browser and the site you came from) to protect the service against attacks and fix errors. The log is stored encrypted and deleted after 30 days. Cookies never go into the log. What is left afterwards is only counts per day (for example how many saw a page), which cannot be linked to anyone.
The legal basis for the log is our legitimate interest in keeping the site safe and running (GDPR article 6(1)(f)).
Links to other sites (such as Discord or the Wayback Machine) open their pages, and their rules apply there.

Where the data is, and who helps us

The site and the log run on one server we rent from Hetzner Online GmbH (Germany), in their data centre in Tuusula near Helsinki, Finland. Nothing is stored or processed outside the EU/EEA. We have a data processing agreement with Hetzner under GDPR article 28, signed 1 November 2026. Hetzner is certified to ISO/IEC 27001 and BSI C5 Type 2, and cannot read the data: the disk is encrypted and the key is not stored with them. Let's Encrypt issues the certificate for the secure connection and only learns the domain name. The fonts are served from our own server.

How long we keep it

Server logs: 30 days.
Backups: 30 days.

Your rights

You have the right to access what we have stored about you, to have errors corrected, to have it deleted, to receive it, and to object to the processing. Write to oyvind@zoney.no and we will answer within a month. If you think we process personal data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Last changed 5 November 2026.

When you visit

No cookies, no analytics from others and no tracking. Nothing is stored in your browser.

The server logs every request (time, your IP address, the page you asked for, your browser and the site you came from) to protect the service against attacks and fix errors. The log is stored encrypted and deleted after 30 days. Cookies never go into the log. What is left afterwards is only counts per day (for example how many saw a page), which cannot be linked to anyone.

The legal basis for the log is our legitimate interest in keeping the site safe and running (GDPR article 6(1)(f)).

Links to other sites (such as Discord or the Wayback Machine) open their pages, and their rules apply there.

Where the data is, and who helps us

Your rights

Last changed 5 November 2026.