StudentBites Oslo
Privacy Policy
This notice describes the information handled by the site as currently configured. StudentBites Oslo is described on the site as an independent student project.
Information and why it is used
- Necessary preferences: the site stores your language choice and cookie-consent preferences in your browser's local storage so it can remember your choices. The consent record expires after 180 days. The consent interface does not send these preferences to our server.
- Hosting and security: Vercel hosts this website and may process technical request information, such as IP address, browser/device details, and request timing, to deliver and protect the site.
- Maps: the Google Maps JavaScript API is requested only when you choose the map view or open a listing location map. Google may receive technical request data and information needed to provide map and location features.
- Fonts: the page preconnects to Google Fonts and loads its stylesheet before an optional-cookie choice is made. This third-party asset request is not controlled by the Analytics or Marketing toggles; Google may receive technical request information such as your IP address and browser details.
- Analytics: GA4 Measurement ID G-NGKEK3KXP7 is intended to be configured through Google Tag Manager container GTM-PJ2S33MB, not directly in this page. The page sends an analytics_storage consent signal, but the published GTM container is external to this code and has not been verified. Google Consent Mode can send cookieless pings while analytics_storage is denied; the GA4 tags must require analytics_storage in GTM to prevent measurement when Analytics is rejected. If enabled and properly configured, Google Analytics may process page views, interactions, browser/device information, online identifiers, and approximate location signals, depending on the tag and property settings.
- Marketing: advertising-related GTM tags may run only when you enable Marketing cookies, provided those tags are configured in the container to respect the advertising consent signals. These tags may process data described in their own configurations.
- Newsletter: if you subscribe, your email address is sent securely to Brevo and added to the StudentBites newsletter list. The API key stays on the server. The form does not send a confirmation email, and your address is not shared with listed restaurants.
Cookies, storage, and your choices
Necessary storage is always enabled for language and consent preferences. Analytics and Marketing are optional and start denied. Google Consent Mode v2 receives the relevant consent updates through the data layer. You can choose Accept All, Reject All, or Customize Preferences, and reopen or withdraw your choice at any time using Cookie Settings in the footer.
This implementation records preferences in browser local storage rather than creating a consent cookie. You can also remove the saved preferences from your browser storage; the consent notice will then appear again.
Third-party providers
Google provides Google Analytics 4, Google Tag Manager, Google Maps, and Google Fonts as described above. Google processes information under its own terms and privacy practices. See Google's Privacy Policy. Vercel provides the site hosting. The site owner should review each provider's current terms and settings.
Retention
The consent selection expires after 180 days. The language preference remains in browser storage until you clear it. Google Analytics event-data retention is controlled in the GA4 property settings and has not been verified by this website code; the site owner should confirm the chosen retention period in GA4. Hosting and third-party service retention is governed by those providers' settings and policies.
Your privacy rights
Depending on applicable law, you may have rights to request access to, correction of, or deletion of personal data, to object to or restrict certain processing, and to withdraw consent. Use Cookie Settings to change or withdraw optional consent. For a complaint in Norway, you may contact the Norwegian Data Protection Authority (Datatilsynet).
Information still to confirm before publication: the controller's legal name and postal address, a privacy contact method, applicable legal bases and international-transfer details, the published GTM tags and providers, any cookies they set with each cookie's purpose and duration, and the configured GA4 and other provider retention periods. The site currently publishes no direct privacy contact address. No owner or contact details have been invented for this notice.