Policies

    Privacy

    Personvernerklæring

    Quick summary

    Bias & Behavior is built to be a private reference. We do not sell data, do not run ads, and do not use third-party tracking tools (such as Google Analytics, Mixpanel, or Facebook Pixel).

    There is no cookie banner because the site does not set cookies in the first place. Two small pieces of local storage are used to remember your language and notification time. If you choose to enable push notifications, we store a cryptographic key so we can send the message to your device.

    What is stored in your browser

    localStorage

    The site stores the following keys in your browser's localStorage:

    • preferred-language — remembers your chosen language (Norwegian or English)
    • notif-hour — remembers your chosen time for the daily push notification
    • sb-...-auth-token — the Supabase client stores an anonymous session token; the app has no user accounts

    Cookies

    The site sets no cookies for normal users. There is unused cookie code (`sidebar:state`) from a previous UI component, but it is not set because the component is not used.

    Push notifications

    Daily push notifications are entirely optional and require you to actively enable them on the Notifications page. When you enable them, your browser sends a unique push subscription key to our backend. This key is only used to send you the daily notification.

    We store the following data in the backend `push_subscriptions` table:

    • The push subscription identifier (`endpoint`, `p256dh`, `auth`) — required to send the message
    • Chosen language, time, and timezone — so the message arrives in the right language and at the right time
    • Last sent timestamp (`last_sent_at`) — to avoid duplicate notifications on the same day

    You can turn off notifications at any time on the same page. The subscription is then deleted from both our backend and your browser.

    Third-party services

    We use Google Fonts to load the Playfair Display and Inter typefaces. Fonts are loaded from Google's servers, but this does not result in cookies being set or give us insight into individual users.

    Google Search Console verification tags are in the HTML and are only used to confirm domain ownership for search results.

    Your rights

    You can delete localStorage content for this site at any time in your browser settings. If you want to delete the push subscription, the easiest way is to turn off notifications on the Notifications page .

    If you have questions about privacy or your data, you can contact us at hei@bias.lovable.app.