Statistics and Privacy
Statistics and Privacy
: signed statistics session reference; set upon approved measurement; expires after 30 minutes without renewal. Events are stored in Norge360's Supabase project. The administrator interface shows aggregated reports, including information about pages, searches, devices, and conversions. The reports do not show full visitor IP addresses or random visit references. The underlying database does, however, contain pseudonymous event entries and may be available to authorized technical operators if necessary.hei@norge360.com
1. Your choice
Statistics only start when you actively choose to accept. The basis is your consent under GDPR Article 6 No. 1 Letter a, along with consent according to current rules for cookies and similar technologies. You can decline statistics and still use the website. Newsletters and statistics are separate choices.
Use «Change privacy choices» on this page to change your choice or withdraw consent. The choice applies to the current browser; other devices and browsers may have different choices. If you clear browser storage, the website may ask again. Withdrawal does not affect the legality of processing before the withdrawal.
Declining statistics does not prevent necessary website delivery, request security, or the processing of forms you submit. These activities are mentioned in Privacy and security.
2. Activity measured with consent
The current statistics system can record:
Page path, language version, event timestamp, and page views.
Search terms, number of results, and clicks on search results.
Estimated time while the page is visible, and maximum scroll depth.
Opening of newsletter forms and successful subscriptions or contact submissions.
Referring domain and selected campaign fields, such as UTM source, medium, and campaign.
Random visit, session, and event references to count returning visits and sessions.
The measurement does not intentionally copy names, email addresses, or message text into the statistics database. An event for a successful submission records the activity, not the form content. Form registrations are stored separately.
The browser sends the page's current URL and the referrer URL to our own statistics endpoint. The server extracts the page path, referring domain, and supported campaign fields; the entire query string is not retained as a statistics field. Selected search terms and campaign fields are stored separately after filtering. The filtering does not guarantee that all personal data is removed. Do not write names, contact information, or sensitive information in searches or campaign links.
3. Browser, device, and IP information
With statistics consent, available information may include device category, brand and model, name and version of browser and operating system, processor architecture and bit size, screen and window size, pixel density, color depth, touch support, number of logical processors, approximate memory and connection type, browser language, and time zone. Availability varies. A reported or derived device model may be incorrect.
When trusted hosting infrastructure provides the IP address, the statistics endpoint masks it before the statistics entry is stored: IPv4 uses a /24 network prefix and IPv6 uses a /48 prefix. The full address is processed by the infrastructure handling the request. Masking in the statistics database does not mean that hosting providers never receive it.
Visit identities are created randomly and are not calculated from device characteristics or IP addresses. The system does not use device fingerprinting as a visit identifier. However, combinations of device details, activity, and identifiers can still distinguish a visitor. Therefore, we treat the underlying entries as pseudonymous personal data rather than promising full anonymity.
4. Cookies and local storage
The current application uses the following first-party storage:
n360_analytics: signed, random visit identifier for statistics; set after approval; up to 180 days.n360_analytics_sessionn360_analytics_choice: remembers approval or rejection so that we can respect the choice; up to 180 days. It does not measure activity in itself.norge360_locale: remembers the language of the website; up to one year. It supports language selection and is separate from statistics.themein local storage: remembers display theme. The application sets no expiration date, and the choice normally remains until it is changed or browser storage is cleared. It is separate from statistics.The first two cookies are optional and require statistics consent. Preference storage is used for the specified preference and not in addition to statistics or advertising. All cookies mentioned here are set by the Norge360 application. Hosting or security services may have their own storage depending on the configuration; they are mentioned in the general privacy policy and relevant provider statements.
You can delete or block cookies and local storage in your browser. Local deletion does not in itself send a request to delete database information. Some preferences or functions may cease to work if storage is blocked.
5. Retention period and access
The current retention period for statistics events is 90 days. The period applies to event entries; the visit cookie may last longer. Under the current configuration, scheduled cleanup will delete consent references older than 180 days. Entries that reach the storage limit are removed during scheduled database cleanup; the expiration of the cookie does not in itself trigger this cleanup.
Last updated: October 8, 2026
Norge360 uses optional visit statistics to understand how content is used and to improve articles, navigation, and search. The statistics also show which pages lead to newsletter subscriptions or contact inquiries. Contact:
The current visitor statistics do not use tracking through advertising networks or identity linking across unrelated websites. This applies to this statistics system; it does not mean that external providers do not process connection or security information.
6. Withdrawal and deletion
Upon withdrawal, the application stops optional measurement and removes its cookies and session cookies from the current browser. It also requests the deletion of events, sessions, and consent references associated with the visitor reference in the application's database.
In the current solution, withdrawal in the browser may succeed even if the database operation fails. Older information may then remain until the configured storage cleanup. Immediate deletion in the database is therefore not guaranteed. Contact hei@norge360.com if you need help with deletion or a rights claim. Backups and relevant provider systems must be considered separately.
If you re-accept, a new random visitor reference is created. The loss of an old cookie may prevent us from linking previous pseudonymous entries to your request. Do not send session cookies or security tokens via email; we can explain a suitable confirmation method if needed.
7. Accuracy and rights
The statistics describe measured activity from browsers with consent, not all visitors. Rejection, blocking, deleted cookies, device switching, missing events, and omitted automated traffic affect the results. The number of visitor references is not a reliable count of persons, and measured conversions do not prove that a page caused a subscription.
You can withdraw consent and exercise relevant rights to access, rectification, erasure, restriction, and data portability through hei@norge360.com. You can complain to Datatilsynet or another competent supervisory authority. See Privacy and security for response deadlines, providers, and international processing.