Privacy Policy

Last updated: April 17, 2026

Data Controller

Astar Technologies AS
Organization number: 934 040 147
Trondheim, Norway
Email: erik@astarconsulting.no

What We Collect

When you sign in and use the competition platform, we collect:

Name and email address (from your Google account or magic link sign-in)
Profile picture (from your Google account, if available)
National identity number verification status (via Vipps, for participant eligibility — we store only the verification result, not your national identity number)
Occupation (optional, if you choose to provide it)
Team membership and competition submissions (submitted solutions and results)
Newsletter signup: email address (if you subscribe)

Purpose

We use your data to operate the NM i AI 2026 competition: authenticating your account, verifying participant eligibility, managing teams, processing submissions, displaying leaderboards, and communicating competition updates.

We also use championship data to publish aggregate statistics and charts (e.g. team counts, popular tools, score distributions), and may publish research and analysis based on the competition. All public outputs use anonymized/aggregated data. Individuals are not identified without separate consent (e.g. leaderboard opt-in).

Legal Basis

Consent (GDPR Article 6(1)(a)). By signing in, you consent to the processing of your data as described in this policy. You can withdraw your consent at any time via unsubscribe or by contacting us.

Cookies

This website uses the following cookies:

access_token — An HTTP-only, secure authentication cookie that keeps you signed in. It expires after 7 days and is automatically refreshed while you use the platform. This cookie is essential for the service to function and cannot be disabled.

Analytics

We use Plausible Analytics for anonymous, aggregated website usage statistics. Plausible does not use cookies, does not collect personal data, and does not track individual users. All data is processed in the EU.

Third Parties

We use the following third-party services to operate the platform. We do not sell your data.

Google OAuth for authentication (name, email, profile picture)
Vipps for national identity verification (eligibility check — only the verification status is returned to us, not your national identity number)
Loops.so for transactional emails and newsletter (magic links, team invites, updates) — EU–US Data Privacy Framework certified
Plausible Analytics for anonymous usage statistics (no personal data)
Google Cloud Platform for hosting and data storage (region: europe-north1, EU)

Data Retention

Email/newsletter list: until you unsubscribe. Competition data: through the 2026 event and up to 12 months after. You can request deletion at any time by contacting us at erik@astarconsulting.no.

Your Rights

Under GDPR, you have the right to:

Access your personal data
Request correction or deletion of your data
Withdraw consent at any time
File a complaint with Datatilsynet (the Norwegian Data Protection Authority)

Datatilsynet

Datatilsynet is the supervisory authority for privacy in Norway:
Postboks 458 Sentrum, 0105 Oslo
postkasse@datatilsynet.no