Privacy Policy
Last updated: 16 April 2026
This site is run by Remi Kleiv Haugen ("Lazy"), based in Norway. This policy explains what personal data I collect, why, and your rights.
What I collect and why
When you buy something
Payments are processed by Stripe. When you check out, Stripe collects your name, email, and payment details (card number, etc.) directly. I receive your name, email, what you bought, and a transaction reference. I never see or store your full card number.
I use this data to fulfil your order (deliver download links) and handle any support requests.
When you use the contact form
I collect your name, email, and message. This is sent to me via email and used only to respond to your inquiry.
Automatically when you visit
- IP address — used to determine your country for automatic currency selection (GeoIP). Your IP is not stored or logged by me beyond standard server access logs.
- Session cookie (
PHPSESSID) — a functional cookie that keeps your shopping cart and login state while you browse. It expires when you close your browser. No tracking, no analytics. - Language preference cookie (
sitelang) — remembers whether you chose English or Norwegian. Lasts 1 year.
What I do not collect
I do not use analytics (no Google Analytics, no trackers), advertising cookies, or any third-party tracking. There are no social media tracking pixels on this site.
Who else processes your data
| Service | Purpose | Their privacy policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| Purelymail | Sending order confirmations and contact form emails | purelymail.com/privacy |
| MaxMind GeoLite2 | IP-to-country lookup (runs locally on the server, no data sent to MaxMind) | maxmind.com/privacy |
How long I keep your data
- Order records — kept as long as needed for accounting and legal requirements (Norwegian bookkeeping law requires 5 years).
- Contact form messages — kept in my email until I no longer need them, then deleted.
- Server access logs — automatically rotated, typically kept for a few weeks.
Your rights under GDPR
You have the right to:
- Access the personal data I hold about you
- Have it corrected if it is wrong
- Have it deleted ("right to be forgotten")
- Restrict or object to processing
- Receive your data in a portable format
- Lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority)
Contact
For any privacy-related questions or requests, email me at remikhaugen@gmail.com or use the contact form.