PRIVACY POLICY_
Privacy
Last updated 9 August 2026
This text was written by the person who built the system, not by a lawyer. It describes exactly what ainow does and is meant to be accurate — but it should be reviewed by someone with privacy expertise before it is considered final.
ainow is built to collect as little about you as possible. This page explains what that means in practice — not in general terms, but field by field.
In short
- We never store your IP address in the visit statistics. If you sign in, the sign-in service stores the IP address of the active session — see “Account”.
- We know which countries ainow is read from, as a single total per country per day. Not who, not where in the country, not what time of day.
- If you have no account, we store nothing about you at all.
- If you have an account, we store your email address and your choices.
- We use no third-party analytics, no ad networks and no tracking cookies.
Country statistics
Once a page has finished loading, your browser sends a short message saying that a visit happened. The message has no content. The server reads the country code our hosting provider derives from the connection — for example NO — and adds one to a counter.
What gets stored is a single row with three fields: date, country code, count. Nothing more, and there is no column anything else could be stored in.
- Your IP address is not read by us, and is not stored in the visit statistics.
- City, coordinates and time zone are not read.
- The count is not linked to an account, a session, or to visits before or after.
- There is no profile, no identifier, and nothing to recognise you by on your next visit.
One reader is counted once per browser tab, not once per click. That is done with a marker held in your own browser, which disappears when the tab closes — it is never sent to us.
The number shown on the site is the number of countries, never the list of them. At low traffic, «one reader from Iceland today» can come close to identifying someone; «read from 14 countries today» does not. That limit lives in the database, not in a rule about what the interface should display — so it cannot be forgotten later.
Accounts
Signing in uses a one-time link sent by email. You have no password with ainow, and you are never asked to choose one. The sign-in service does still fill its own password field with an irreversible hash that corresponds to no password you have chosen. It cannot be used to sign in, because ainow does not offer password sign-in at all.
| We store | Why |
|---|---|
| Your email address | to sign you in and to contact you about your account |
| When the account was created and last used | set by the authentication service |
| Language and theme | so your choices follow you between devices |
| Display name | optional, and only if you enter one yourself |
While you are signed in, the sign-in service stores the IP address of the active session. We neither read nor use it — but it sits in our database, and so it belongs in this text. A session has no automatic expiry: the record is deleted when you sign out, which removes all of your active sessions at the same time. It is always deleted when you delete your account.
We never ask for and never store national identity numbers, postal addresses or phone numbers.
Payment
Payment is handled entirely by Stripe. Card number, expiry date and security code are entered at Stripe and never pass through our systems — we do not render card fields ourselves and have no way of seeing them.
We store a customer reference and a subscription reference at Stripe, plus status, plan, currency and the date the current period ends. That is what is needed to know whether you have access.
Stripe additionally stores what is required to complete the payment and to meet accounting obligations, under its own terms.
Storage in your browser
ainow uses no tracking cookies. What is stored locally is your choices and your sign-in — none of it tells us who you are, and none of it is shared with anyone.
| Name | What | How long |
|---|---|---|
| ainow-sprak | your language choice, so the front page sends you to the right language | 1 year |
| ainow-tema | light or dark theme | until you remove it |
| ainow-neste | which page to return to after signing in | until you are back |
| ainow-valuta | the currency selected on the subscription page | until you remove it |
| ainow-besok | that this tab has already been counted in the country statistics | until the tab closes |
| The sign-in marker | that you are signed in | until you sign out |
You can delete all of it at any time in your browser settings. You will lose your choices and be signed out — nothing else happens.
Who processes data on our behalf
ainow is run by one person and uses five external providers. They process data on our behalf, under contract, and cannot use it for their own purposes.
| Provider | What they do | Where |
|---|---|---|
| Supabase | database and sign-in | EU (Frankfurt) |
| Vercel | hosting the site and the server functions | server functions run in the EU (Frankfurt); static pages are served from the nearest edge location |
| Cloudflare | domain name lookups (DNS) and forwarding email to us | global network, under Cloudflare's own terms |
| Resend | delivering sign-in links and confirmations by email | EU and the United States, under Resend's own terms |
| Stripe | payment | EU and the United States, under Stripe's own terms |
The news text you read has been processed by a language model from Anthropic. It processes publicly published news articles — not information about you. You send nothing to a language model by reading ainow.
Legal basis
| What | Basis |
|---|---|
| Accounts and sign-in | contract — you asked for an account |
| Payment | contract, and legal obligation for accounting |
| Country statistics | legitimate interest — knowing whether the service is read outside Norway |
For the country statistics the legitimate interest is balanced as follows: the intrusion is as small as it can be, because no information about you is stored. The country code is derived at the hosting provider, which has to see the connection in order to deliver the page at all, and we never receive the address it was derived from.
Your rights
You have the right to see the information we hold about you, to have it corrected, to have it erased, to receive it in a machine-readable format, and to object to the processing.
Two of those you can carry out yourself, immediately, without asking anyone:
- Download your data — the account page gives you a file with your account, profile and subscription status.
- Delete your account — the account page removes your account and everything attached to it, immediately and with no way to restore it. Any subscription is cancelled at the same time, so your card is not charged again.
The country statistics cannot be deleted on request, because they contain no information about you to find. That follows from the data being aggregated from the very first moment — it is not an evasion.
If you disagree with how we process information about you, you can complain to the Norwegian Data Protection Authority (Datatilsynet).
How long we keep things
| What | How long |
|---|---|
| Country statistics | indefinitely — they are aggregated and contain no personal data |
| Account and profile | until you delete the account |
| Subscription status | until you delete the account |
| Payment history at Stripe | under accounting rules, normally five years |
Changes
If this policy changes, the date at the top is updated. For material changes to what is collected, notice is given on the site — not only in the text.
Data controller and contact
The data controller for the information described here is Niklas Klo, as a private individual. ainow is not registered as a company and therefore has no company registration number. Responsibility rests with the person, not with a company.
Questions about privacy, access or deletion: personvern@ainow.no.