Privacy Policy

Last updated · April 2026

Who we are

Brunskilt (“we”, “us”) is a free tool that helps drivers in Norway discover the country's brown tourist signs. You can reach us at erik+signs@marawaca.com (replace before launch).

What we collect

• Account data. If you sign up, we store your email address, a salted bcrypt hash of your password, and your display name. We never see your raw password.
• Location. The mobile app and web frontend can request your device location so we can show nearby signs. Location data is processed on your device and, when you explicitly submit a rating or tip, attached to that submission. We do not keep a location history.
• User-submitted content. Ratings, written comments and tips you post are stored alongside your user ID so you can edit or delete them later.
• Server logs. Standard web-server logs (IP address, user agent, timestamps, URL paths) are retained for up to 30 days for debugging and abuse prevention.

What we do not collect

• We do not use third-party advertising cookies.
• We do not sell or rent personal data.
• We do not track you across other websites.

Cookies & local storage

When you sign in on the web, we store a session token in your browser's localStorage so you don't have to log in again. This is functional, not analytical, and no data is sent to third parties. The mobile app uses Expo Secure Store for the equivalent purpose.

Third-party services

• Plausible Analytics — privacy-friendly, cookieless page-view counting. Only used when enabled by the operator.
• Sentry — error monitoring. Captures JavaScript / backend stack traces when something breaks. Only used when enabled by the operator.
• OpenAI — used to generate suggested routes when you request them. We send only the prompt parameters, never your account data.
• Map tiles & imagery — OpenStreetMap and Wikimedia Commons serve map tiles and sign photographs directly to your browser. We do not proxy this traffic.

Your rights

Under GDPR you have the right to access, correct, export and delete your personal data. You can:

• Delete your account from the app, which removes your user record and, via database cascades, all of your ratings, tips, custom routes and favorites. Use the “Delete account” button on your profile, or DELETE /api/users/me if you prefer the API.
• Request a data export by emailing the contact above. We will respond within 30 days.

Children

Brunskilt is not directed at children under 13. If you believe we have data from a child, email us and we will delete it.

Changes

We may update this policy as the service evolves. Material changes will be highlighted on this page.

← Back to Brunskilt