Who is responsible
FleaMarket.no is the data controller for the information on this site. If you have questions, or want something deleted, personvern@fleamarket.no is the fastest route.
What we store
| What | Why | For how long |
|---|---|---|
| Email addressif you sign up for alerts | To send you what you asked for.Legal basis: your consent, GDPR Article 6(1)(a). | Until you unsubscribe.Your choices are deleted at the same time. |
| The consent textword for word, with a timestamp | So we can show exactly what you agreed to, not merely that you did.Section 15 of the Norwegian Marketing Control Act (markedsføringsloven) requires prior consent. | As long as the subscription lasts. |
| What you type inwhen you submit a flea market | To publish the market, and to be able to contact you about the listing.Legal basis: contract and legitimate interest. | As long as the listing stands. |
| A hash of the IP addresssalted, truncated | To stop spam submissions from the same machine.The IP address itself is never stored, and the hash cannot be reversed. | Rolling, one hour. |
| Page view counters | To know which pages are used.See below — this is not personal data. | No end date.There is nothing there to delete. |
The statistics count, they do not follow
Most websites measure visits with a third-party script that puts an identifier in your browser. We do something else, and that is why you have not been asked to click away a cookie banner here.
When you open a page, we add one to a counter. The row looks like this:
day: 2026-09-05 · page: /en/flea-market/oslo · from: google.com · views: 41
That is the whole row. It holds no identifier, and two people reading the same page on the same day become the number 2 — there is no way to tell them apart again, not even for us.
So we do not store
- No cookies for measurement, statistics or marketing. The site sets none.
- No IP addresses tied to what you read.
- No profile of you across pages or visits.
- No tracking pixels in email. We do not know whether you opened it.
- No sharing with ad networks. We do not sell addresses, and we do not resell attention.
Who else sees the information
We use three suppliers, all as data processors for us:
Supabase
The database. Hosted in the EU. Email addresses, submissions and the counters are stored here.
Vercel
The servers that serve the site. They keep operational logs with IP addresses for a short period, as any web server does.
Resend
Sends the email. Receives your address and the contents of the message, and nothing else.
Beyond this we share nothing with anyone. If we ever have to change the list, it is changed here first.
Your rights
You can ask to see what we hold about you, have it corrected, have it deleted, and withdraw a consent at any time. For alerts, unsubscribing is fastest: every email has a link that works in one click, and it deletes your choices at the same time.
Send us an email and we reply within 30 days. If you believe we are processing data we should not, you can complain to the Norwegian Data Protection Authority.
Information about people other than you
The site shows shops and associations taken from the Norwegian Register of Business Enterprises, the Register of Non-Profit Organisations and the organisations' own websites. That is information about organisations, not about private individuals.
In one place we draw a line stricter than the law requires: many associations are registered at the treasurer's home address. We never store that address, only the municipality — a private home does not belong in a searchable register of flea markets, no matter where it came from. For the same reason we do not store email addresses that look like they belong to a person rather than to a role.
If something private of yours is listed anyway, tell us — and we will remove it.