Privacy policy
This page explains what nicelab.io collects, why, and what you can do about it. NiceLab AS, organisation number 936 966 497, registered in Norway, is the data controller.
The short version
- Analytics only runs if you accept it. Decline and nothing is loaded.
- We do not sell data, run advertising, or share anything for marketing.
- The only personal data we actively receive is what you choose to put in an email to us.
Analytics
We use Google Analytics 4. It is loaded only if you press Accept on the cookie banner. If you decline, or simply ignore the banner, the script is never added to the page and nothing is sent to Google.
When it does run, it records which pages you visit, roughly where you are (worked out from your IP address, at city level), what kind of device and browser you use, and which site sent you here. We have also set it up to record three specific things: when you click through to one of our platforms and which one, when you click the contact address to open your mail client, and when you open a platform page.
Google processes this on our behalf and may transfer it outside the EEA under its standard contractual clauses. Event-level data is deleted after the retention period set on the property; aggregated reports stay in Google Analytics.
Legal basis: your consent, GDPR Article 6(1)(a). You can withdraw it at any time using the Cookies link in the footer.
What is stored in your browser
| Name | Purpose | Kept for | Set when |
|---|---|---|---|
| NEXT_LOCALE | Remembers whether you are reading the site in English or Norwegian. | 1 year | On your first visit, without consent — the site needs it to work |
| nicelab.analytics-consent | Remembers whether you accepted or declined analytics. Stored in local storage, not a cookie. | Until you clear it | When you answer the banner |
| _ga | Google Analytics. Tells returning visits apart from new ones. | 2 years | Only if you accept |
| _ga_9N9FLPJ9F1 | Google Analytics. Keeps track of the current session. | 2 years | Only if you accept |
When you contact us
There is no contact form. Getting in touch means sending an email from your own mail client, so what we receive is whatever your message carries: your email address, the name your mail client puts on it, the text you wrote and anything you attach.
The address is an alias that lands in a shared mailbox on our own mail server, and the message is shown in a help-desk tool we run ourselves so more than one of us can answer. Both sit on the same servers as the site, at Hetzner in Finland. No third-party email provider is involved, and the message is not passed to anyone else.
We keep the message as long as we need it to deal with your enquiry, and in the mailbox afterwards as a record of the correspondence.
Legal basis: our legitimate interest in answering enquiries, GDPR Article 6(1)(f).
Hosting and infrastructure
The site runs on a server we manage at Hetzner Online GmbH in Helsinki, Finland, inside the EEA.
Traffic passes through Cloudflare, which works as a proxy and content delivery network. Cloudflare sees the IP address and request details of every visit, and may set its own cookies for security purposes. This is what keeps the site fast and protects it against attack.
What we do not do
- No advertising or remarketing.
- No selling or sharing of personal data.
- No profiling and no automated decision-making.
- No newsletter, and no tracking pixels in the email we send you.
Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict how we use it, ask for it in a portable format, or object to us using it. Send the request to [email protected] and we will deal with it.
If you are not happy with how we handle it, you can complain to Datatilsynet, the Norwegian Data Protection Authority.
Changes to this page
If what we collect changes, we will update this page and the date at the top.