Privacy policy
How we process your personal data
This is a translation. The Norwegian version, Personvernerklæring, is authoritative.
Your privacy matters to us
TriSonen is committed to protecting your privacy. This policy explains how we collect, use and protect your personal data in accordance with the GDPR and Norwegian data protection legislation.
Transparency
We are open about what data we collect and why.
Your rights
You have full control over your personal data.
Security
Your data is stored securely and processed responsibly.
Data controller
The data controller for the personal data collected through TriSonen is:
What information do we collect?
User accounts
When you create an account, we collect your email address and, where provided, your name. This is used to identify you and give you access to personal features.
Athlete profiles
If you claim an athlete profile, your account is linked to publicly available competition results. This data has already been made public by the organisers.
Competition results
We import publicly available results from triathlon competitions. This includes name, year of birth, club, times and placings.
Newsletter
If you sign up for our newsletter, we store your email address so that we can send you updates. You can unsubscribe at any time.
Contact form
When you send us a message through the contact form, we store your name, email address and the content of the message so that we can reply to you.
How do we use the information?
- Showing results and statistics from competitions
- Giving athletes access to their personal performance history
- Sending newsletters and important information (only with your consent)
- Improving the service based on anonymised usage data
Cookies
We only use the cookies that are necessary for the website to work. These include:
- Authentication: To keep you signed in (Supabase session cookies)
- Security (CSRF): To protect form submissions against misuse
- Preferences: To remember your settings (such as dark mode and accessibility settings)
- Consent: To remember your choice about cookies
- View counting: An anonymous cookie (
av_*) that stops the same article from being counted several times when the page is reloaded. It lasts for 30 minutes and contains no personal data. - App installation: Stores whether you have dismissed the prompt to install TriSonen as an app, so that we do not ask again
We use Vercel Analytics for anonymous usage statistics and Vercel Speed Insights for performance monitoring. These services use no cookies. They record page and performance data and a short-lived, hashed visitor identifier derived from the IP address and browser, which is not shared with third parties and cannot be used to identify you personally.
View counter on athlete profiles: We count how many times an athlete profile has been viewed. To avoid counting the same visitor more than once, we store a salted, non-reversible hash of the IP address and browser type together with the date — never the IP address or the browser itself. The hash is only used to count one view per visitor per day, is not shared with third parties, and is deleted automatically after 400 days.
Embedded videos (YouTube and Vimeo)
Some articles may contain embedded videos. We use youtube-nocookie.com for YouTube videos so that YouTube does not set cookies or track you until you actually start playback. Vimeo videos may set their own cookies on playback. If you do not want this, do not start the videos.
Your rights
Under the GDPR you have the following rights:
- Access: You can ask for a copy of all the information we hold about you
- Rectification: You can ask for incorrect information to be corrected
- Erasure: You can ask for your information to be deleted
- Data portability: You can ask to receive your data in a machine-readable format
- Objection: You can object to the processing of your personal data
To exercise these rights, contact us at the email address below. We will reply within 30 days.
Security and storage
Your data is stored securely with our subprocessors, all of which operate in accordance with the GDPR:
- Supabase: Database and authentication (EU-based)
- Vercel: Hosting and performance monitoring
- Vercel Analytics: Anonymised usage statistics (no personal data)
- Resend: Sending newsletters and email
We never share your personal data with third parties for marketing purposes. Data is only transferred to the subprocessors listed above, and only to deliver the services described in this policy.
Questions about privacy?
Do you have questions about how we process your personal data, or do you want to exercise your rights? Get in touch.
hei@trisonen.noLast updated: April 2026