How NorPilot handles the small amount of personal data our public website processes, and who to contact with privacy questions.
No sign-in, no passwords, no payment. The V1 site does not have user accounts.
Academy progress, theme, saved routes and your pass name live in your browser’s localStorage and are not sent to us.
Vercel Web Analytics (a browser script) and NorPilot's own aggregate milestone counters record use without cookies or cross-site tracking. No pass names, place names or saved trips.
NorPilot does not sell data, run ads, use ad-tech cookies, build cross-site profiles or share with brokers.
NorPilot is an Arctic driving preparation and safety guidance service, currently focused on Northern Norway, Northern Sweden and Northern Finland. The controller of any personal data processed through this website is NorPilot (contact: hello@norpilot.com).
The full legal entity, organisation number and postal address will be published on this page once registered. Until then, all inquiries should reach us at hello@norpilot.com.
Contact form: when you send a message from the /contact page, we process the name, email and message text you enter, plus any headers your browser sends with the request. The message is transmitted through Resend (resend.com) — an email-delivery processor — and delivered to a NorPilot mailbox.
Lawful basis: your consent by submitting the form, and NorPilot's legitimate interest in replying. Retention: contact messages and feedback emails are kept only as long as needed to answer you and manage any follow-up. You can ask us to delete a message at any time.
Feedback form: the answers you enter on /feedback, and your email if you add one, are emailed to the NorPilot team through Resend. Feedback is not stored in a NorPilot database. Reviews: public reviews are not part of the V1 site — Home does not show, load or accept reviews, so no review data is collected. There are no accounts, passwords or payment details, and the app, pilot and story-share pages do not collect data.
The site stores small amounts of state in your browser's localStorage so features keep working across page loads. These values stay on your device.
These values are used only to provide features you use. You can clear them at any time in your browser settings. Clearing them resets the corresponding feature to its default state.
Your saved trips and Academy progress are stored in this browser.
Ordinary site updates keep this data. Only you can delete it.
It lives only in this browser. Clearing browser data, or changing device, removes it.
The site uses Vercel Web Analytics. A small script loaded in your browser records page views and a few NorPilot-defined product events: Route Check started, completed (template or own route) and failed (reason only); Academy module started, module completed and module quiz passed (module and track); practice quiz used (quick or topic); and Prepare opened. These events never contain the place names you type, the trips you save, or any name you enter. No cookies are set and no cross-site tracking takes place. Vercel Web Analytics is provided by Vercel Inc. as a processor; a visit is recognised by a hash derived from the incoming request, which is discarded after 24 hours.
The site also keeps its own aggregate product statistics, collected under a documented method we call NorPilot Analytics Methodology v1. When you reach one of twelve product milestones — completing a Route Check, entering an Academy track, completing a module, attempting or passing a Final Check, earning or downloading a Preparation Pass, saving a trip or reopening one you saved on an earlier day, following an official-source link, or sending us a message — your browser reports that milestone to norpilot.com and a counter is increased by one.
What a milestone contains is deliberately small: the milestone name, the language of the page, and where it applies the Academy track, the module, the name of the official source (for example Statens vegvesen or Yr), and whether a passed Final Check was above 90 percent. The first and last name on your Preparation Pass, the routes and trips you save, the dates you choose and anything you type are never part of it. There is no per-visitor record, no profile and no account — only daily totals.
So that one browser is not counted twice, your browser keeps a random value (np-analytics-device-id) and sends it with a milestone. The server never stores that value: it stores a one-way hash of it, salted with a secret only the server holds, under a key that expires after 13 months — or after 24 hours for repeatable actions such as saving a trip or downloading the pass. These counters and markers are stored by Upstash, Inc. as a processor. Because neither analytics layer sets cookies, builds a profile or follows you across websites, we do not present a consent banner; you can prevent both by using a browser or extension that blocks the /_vercel/insights and /api/metrics endpoints, and clearing your browser storage removes the random value.
The site is hosted on Vercel, so every page request reaches Vercel's servers, and the analytics script above runs on every page. Route Check contacts third-party services: opening /routes loads the map from OpenFreeMap straight away; place search and route calculation happen when you press Prepare route; Google Maps or Apple Maps receive data only if you click their link.
Place search when you press Prepare route and a place name is not in NorPilot’s built-in place list.
SentThe place-name text you typed, with your IP address as part of the request.
© OpenStreetMap contributors (ODbL).
Compute the driving route after you press Prepare route.
SentThe start and end coordinates of the route, with your IP address as part of the request.
Load the Route Check map as soon as /routes opens — before you prepare a route.
SentStandard map style, tile and font requests for the map area on screen, with your IP address. No place names are sent.
OpenFreeMap © OpenMapTiles · Data from OpenStreetMap.
Open your prepared route in Google Maps or Apple Maps — only when you click that link. No Google or Apple map is embedded in NorPilot.
SentThe route’s start and end coordinates in the link, sent when you click it. Google’s or Apple’s own privacy policy then applies.
Deliver contact messages and feedback to the NorPilot team.
SentWhat you enter in the contact or feedback form — see the sections above.
These calls carry no NorPilot-issued user identifier, but like any web request they include your IP address. External services may log requests under their own policies.
NorPilot does not sell personal data, does not run advertising, does not use ad-tech cookies, does not build cross-site profiles, and does not share data with brokers.
The V1 launch does not offer accounts, sign-in, or paid services.
Under the GDPR you have the right to access, correct, delete, restrict, and object to the processing of personal data we hold about you, and the right to data portability. To exercise any of these rights, write to hello@norpilot.com and describe your request.
If you believe we have not respected your rights, you can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).
When this policy changes, we update the date at the top of the page. We do not send separate change notifications.
