This is the honest, short version.
What NorseHost stores
Google Analytics 4 (GA4, property G-9BW4TNXZC8). We use it to see
how many people visit, which pages they read, which country they’re in,
and roughly how they got here. It is strictly opt-in: no request is
sent to Google until you click Accept analytics on the consent banner.
If you reject, if you haven’t decided, or if your browser sends the
Global Privacy Control (Sec-GPC: 1) signal, we load nothing from
Google at all. You can withdraw consent any time via Cookie settings
in the footer.
We do not run Facebook Pixel, Hotjar, session replay, or any cross-site behavioural tracker. No advertising cookies. GA4 is configured with IP anonymisation and with Consent Mode v2 defaults set to denied for ads storage, ad personalisation, and ad user data - those never flip to granted on NorseHost.
We also have basic server access logs (Caddy on our VPS). These include IP, requested URL, and User-Agent. They’re rotated after 14 days and not correlated with anything.
Cookies
mn_analytics- our own first-party cookie that remembers whether you accepted or rejected analytics, so we don’t re-ask on every page. Set only after you click Accept or Reject. 180-day expiry._ga,_ga_9BW4TNXZC8- set by Google Analytics 4 only if you accepted analytics. First-party, ~13-month expiry. Used by GA4 to distinguish unique browsers within a session.
Affiliate partners may set a cookie on their domain when you click an outbound link - that’s how affiliate attribution works. The cookie is on their domain, not ours, and it’s disclosed beside each affiliate link.
Email (if you contact us)
We use our MediaNordic business email to reply. We keep contact threads for a year for continuity, then delete.
Affiliate program tracking
When you click through to a hosting provider from a review, that provider sets their own tracking cookie. Industry-standard attribution windows are 30-90 days. We have no access to who you are after the click; we only see aggregate commission reports (“Booking X converted on Y date from Z post”).
Your rights (GDPR)
You’re in the EU/EEA. You can email us to request what we have on you (almost certainly nothing beyond a 14-day-old server log), request deletion, or file a complaint with Datatilsynet.
Contact
- [email protected]
- Subject prefix:
[privacy]