Privacy
Ordpar sets no cookies, has no accounts, and has no advertising or scripts from other companies on its pages. This page says what your browser keeps, what it sends to us, what we keep and for how long, and which companies handle it. They are GitHub, which serves the site's pages; Cloudflare, which runs our receiver and our audio server; Anthropic, whose AI assistant may help us read a report you send; and, while the site is being developed, Google, which holds our feedback form.
What stays on your device
Your browser keeps these in its storage for this site: your settings, when you change one; whether you search in English or in Norwegian, once you have switched; your favourites, when you mark one; your search history (a list of words you have looked up); a note about the offer to install Ordpar as an app (whether it was shown, your answer and when, and, until you close the tab, that it was shown in this visit); and, if you download the whole dictionary for use offline, that copy and two records about it (its date and size, and the result of the last check for a newer version). None of this is sent anywhere. Only your browser reads it, and it leaves your device only if you export it to a file yourself.
The site also installs a small background script in your browser (a service worker) when you open any of its pages, whether or not you keep the offline copy. Without the copy it changes nothing, except that a page that cannot load shows a short notice; with the copy, it answers from the copy. It keeps nothing of its own.
To delete what is stored, go to Settings: "Delete stored data" removes everything listed above except the offline copy itself and the note for the open tab, which goes when you close it; "Remove the offline copy" removes the copy and its records. Clearing this site's data in your browser's own settings removes all of it, the service worker included.
What your browser sends us
Ordpar does not count its readers or record what they look up. Apart from a request for a recording when you play one (see "Audio" below) and a report of a mistake if you send one (see "Reporting a mistake" below), your browser sends us nothing: not the pages you view, not what you search for, and not whether you install Ordpar as an app.
Where it is kept, and for how long
The receiver is a small program of ours that Cloudflare runs for us (a Cloudflare Worker), at https://ordpar-receiver.ordpar.workers.dev. It runs at whichever of Cloudflare's locations your request reaches, which may be outside the EU. What it keeps is stored in Cloudflare's database service, in a database created in Cloudflare's EU jurisdiction, so its data is stored in the EU.
We have turned off the request log that Cloudflare offers us for the receiver. Cloudflare itself keeps log data about the traffic on its network, which can include IP addresses, in its data centres in the US and Europe "for a limited period of time"; it does not say how long.
Cloudflare keeps our database restorable to any minute of the last 7 days (its "Time Travel", which is always on), so a line we delete can still be restored by us for 7 days. Cloudflare does not say how long its own backups last.
Cloudflare, Inc. is an American company. It handles this data for us as our processor, under the data processing addendum that is part of its terms. Cloudflare states that it is certified under the EU–US Data Privacy Framework, which covers transfers to the United States, and its addendum includes the EU's standard contractual clauses.
What GitHub sees
The site's pages and files are served by GitHub Pages (GitHub, Inc., an American company), so GitHub receives your IP address and the address of each page and file your browser asks for. GitHub says that when a site it serves this way is visited, the visitor's IP address is logged and stored for security purposes. It does not say for how long, nor whether it does this for us or for itself. Its privacy statement says that for transfers out of the EU it generally relies on the EU's standard contractual clauses.
A search is kept in the part of the page's address after "#", which your browser never sends to any server. But to answer a search, your browser fetches from GitHub the parts of the dictionary's index named by its first few letters, and the pages of the articles it shows in full, so GitHub could tell roughly what was looked up. With JavaScript turned off, the search does not work, and your search is not sent anywhere. If you keep the offline copy, your browser asks GitHub whether there is a newer version while you use the site, at most once every 15 minutes.
Audio
When you press a sound icon, or rest the pointer on one, your browser fetches the recording from Ordpar's audio server, a small program on Cloudflare's network. The request reaches Cloudflare like any request on the web; our program sets no cookie and keeps no logs of it.
Reporting a mistake
Under every article there is a button, "Suggest a correction". If you use it, your browser sends our receiver one message when you press Send, and only then: what you wrote, where you said the mistake is (if you chose), your email address (if you gave one), a name to credit (if you gave one), the article's number, and which version of the site is current when you send it. Nothing else goes with it: no cookie, no identifier, and not the address of the page you were on.
The receiver stores the report with the day it arrived. It does not use or store your IP address or your browser's name for a report. To stop a flood of reports, it accepts at most 30 reports an hour from everyone together: for this it keeps only the number of reports that have arrived in the current hour, nothing about who sent them, and deletes that number once the hour is over. When the hour's number is reached, everyone who sends a report is asked to try again later.
Robin reads the reports, to correct the dictionary. He may read a report with the help of an AI assistant (Claude, by Anthropic). The report's text then goes to Anthropic, which keeps the conversation for 30 days and does not use it to improve its AI models, except that it may use a conversation its safety systems flag for its safety work. Your email address and the name to credit are never shared with it. The reports are kept in Cloudflare's database service, in the EU (see "Where it is kept" above). We use your email address only to answer your report, and delete it once we have dealt with the report; like any deletion in that database, it can still be restored by us for 7 days after that. The rest of the report (the text, where the mistake is, the article, the day and the site's version) is kept after that, as our record of what readers have helped us correct, with no end date. Please do not write anything in a report that you would not want us to keep.
The name to credit is optional, and only for our page Thanks to our readers, which lists the fixes readers' reports have led to. If your report leads to a fix, we may publish the name there with the fix, as you gave it or shortened; we never publish it otherwise, and we name nobody who did not give a name. When we have dealt with the report, the name is deleted from the receiver as your email address is, whether or not we published it; a published name is kept only in the list of fixes behind that page. If you want your name taken off the page, write to post@ordpar.no, and we will take it off.
The legal basis is our legitimate interest in correcting the dictionary (GDPR Article 6(1)(f)); for your email address, your choice to give it so that we can answer you (GDPR Article 6(1)(a)); and for a name to credit, your consent, which you give by writing it in the field and can withdraw at any time (GDPR Article 6(1)(a)). You can ask us to see, correct or delete a report you sent, to delete your email address before we answer, or to take your name off the Thanks page, by writing to post@ordpar.no. Since we do not know who sent a report, tell us roughly when you sent it and what it said.
Who is responsible
Robin Fauskanger is responsible for this data (the controller), and can be reached at post@ordpar.no.
Nothing here is required of you: the site works the same if your browser sends nothing. No decision about you is made from this data.
Your rights
You can ask us what we hold about you, and have it corrected, deleted or its use restricted, or object to our use of it.
You can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the data protection authority where you live or work.
Questions
To ask about this page or to use any of these rights, write to post@ordpar.no. While the site is being developed, the feedback form linked at the foot of every page is a Google form, so what you write there is kept by Google.
If what we collect changes, this page will say so, with the date of the change.