Privacy

What we store, and what we have left alone

In short: we store your email address if you gave it to us yourself, and beyond that almost nothing. That is not a turn of phrase — it is a list you can read below.

Who is responsible

FleaMarket.no is the data controller for the information on this site. If you have questions, or want something deleted, personvern@fleamarket.no is the fastest route.

What we store

WhatWhyFor how long
Email addressif you sign up for alerts To send you what you asked for.Legal basis: your consent, GDPR Article 6(1)(a). Until you unsubscribe.Your choices are deleted at the same time.
The consent textword for word, with a timestamp So we can show exactly what you agreed to, not merely that you did.Section 15 of the Norwegian Marketing Control Act (markedsføringsloven) requires prior consent. As long as the subscription lasts.
What you type inwhen you submit a flea market To publish the market, and to be able to contact you about the listing.Legal basis: contract and legitimate interest. As long as the listing stands.
A hash of the IP addresssalted, truncated To stop spam submissions from the same machine.The IP address itself is never stored, and the hash cannot be reversed. Rolling, one hour.
Page view counters To know which pages are used.See below — this is not personal data. No end date.There is nothing there to delete.

The statistics count, they do not follow

Most websites measure visits with a third-party script that puts an identifier in your browser. We do something else, and that is why you have not been asked to click away a cookie banner here.

When you open a page, we add one to a counter. The row looks like this:

day: 2026-09-05 · page: /en/flea-market/oslo · from: google.com · views: 41

That is the whole row. It holds no identifier, and two people reading the same page on the same day become the number 2 — there is no way to tell them apart again, not even for us.

So we do not store

  • No cookies for measurement, statistics or marketing. The site sets none.
  • No IP addresses tied to what you read.
  • No profile of you across pages or visits.
  • No tracking pixels in email. We do not know whether you opened it.
  • No sharing with ad networks. We do not sell addresses, and we do not resell attention.

Who else sees the information

We use three suppliers, all as data processors for us:

Supabase

The database. Hosted in the EU. Email addresses, submissions and the counters are stored here.

Vercel

The servers that serve the site. They keep operational logs with IP addresses for a short period, as any web server does.

Resend

Sends the email. Receives your address and the contents of the message, and nothing else.

Beyond this we share nothing with anyone. If we ever have to change the list, it is changed here first.

Your rights

You can ask to see what we hold about you, have it corrected, have it deleted, and withdraw a consent at any time. For alerts, unsubscribing is fastest: every email has a link that works in one click, and it deletes your choices at the same time.

Send us an email and we reply within 30 days. If you believe we are processing data we should not, you can complain to the Norwegian Data Protection Authority.

Information about people other than you

The site shows shops and associations taken from the Norwegian Register of Business Enterprises, the Register of Non-Profit Organisations and the organisations' own websites. That is information about organisations, not about private individuals.

In one place we draw a line stricter than the law requires: many associations are registered at the treasurer's home address. We never store that address, only the municipality — a private home does not belong in a searchable register of flea markets, no matter where it came from. For the same reason we do not store email addresses that look like they belong to a person rather than to a role.

If something private of yours is listed anyway, tell us — and we will remove it.