Privacy

Last updated October 18, 2026. Les på norsk.

Who is responsible

Solstad Ent (a sole proprietorship) is the data controller for Dscvr. The business is run by Anders Solstad.

Organization number: 913 457 161. Address: Straumetoppen 31A, 5353 Straume, Norway.

Send questions to anders@skapnerden.com.

What we use, why and for how long

• Account and login. Name, email and profile picture from your Google account, and who the members of the account are. Legal basis: our contract with you (GDPR Article 6(1)(b)). Kept until the account is deleted.
• Library and API. The videos you save, the channels you follow, your usage, the AIs you have connected, and the names of your API keys. The key itself is not stored. Legal basis: the contract. Kept until the account is deleted.
• Payment and credits. References to purchases and subscriptions at Stripe, payment status, period and how many credits you have bought and used. We don't store your card number. Legal basis: the contract. Kept until the account is deleted.
• Accounting. Your purchases are recorded in our accounts. Legal basis: the Norwegian Bookkeeping Act (Article 6(1)(c)). The accounts are kept for five years after the end of the financial year.
• Security. We count requests from accounts and IP addresses to prevent abuse. For each AI request we log the account, the AI, what it did and how long it took, but not what it searched for or got back. Legal basis: our legitimate interest in preventing abuse and fixing errors (Article 6(1)(f)). The IP addresses in the counts are deleted after three days at most, the log after one hour.
• Backup. An encrypted copy of the data above, so we can restore it after a failure. Legal basis: legitimate interest (Article 6(1)(f)). We make one copy each night and keep the 14 most recent.

You need to log in with Google to get an account. Without a name and email we can't create the account.

We don't sell data, we don't show ads and we make no automated decisions about you.

Who gets the data

• Supabase stores the account and the library in the EU. Supabase is our processor.
• Vercel runs the website and gets your IP address when you use it. Vercel is our processor.
• Google handles the login. Google is responsible for your Google account itself.
• Stripe takes the payment and gets the payment details you enter. Stripe is responsible for them itself.
• The AI you connect yourself, for example Claude or ChatGPT, reads your library when you ask it to. It doesn't get your name, email or profile picture. The provider is responsible for what it reads, and may be based outside the EEA.

You can remove access for an AI on the Connect AI page. It stops working from the next request.

Transfers outside the EEA

Supabase is a company in Singapore, and Vercel is a company in the United States. Both may access the data from their country. The transfer is based on the EU Standard Contractual Clauses (Article 46). You get a copy if you ask for it.

If you connect an AI outside the EEA, we send the data you ask it for there. Claude and ChatGPT come from companies in the United States. The basis is that the transfer is needed to perform our contract with you (Article 49(1)(b)).

Cookies

We only use cookies that keep you logged in. No tracking.

Your rights

You can ask for access, correction, deletion and restriction. You can also object to what we do based on legitimate interest.

On the account page you can download your data as a file you can take to another service, and delete the account. Deletion requires a fresh login. If you have an active subscription, you need to stop it first. A shared account must be sorted out first, so that other people's data is kept.

If the subscription stops, the account is paused for 30 days. After that it is deleted without you asking. If the account has paid credits left, is shared, or has an unsettled payment, it is not deleted automatically.

Deletion removes your login, memberships, keys, library, channels and payment history. Your purchases stay in our accounts for as long as the Bookkeeping Act requires.

Email anders@skapnerden.com to use your rights. You get an answer within one month.

You can complain to the Norwegian Data Protection Authority, Datatilsynet.