This is an informational English translation. The Norwegian (Bokmål) version is legally authoritative; in case of any discrepancy, the Norwegian text controls.
Short version
ai-flow.no does not use cookies for analytics or marketing. The site is deliberately built so that visit statistics don’t require storing anything on your device, so we don’t need to ask for your consent to do so.
What the law says
Storing or accessing information on your device (cookies, localStorage, and similar technologies) is regulated by the Norwegian Electronic Communications Act (ekomloven), LOV-2024-12-13-76 § 3-15, in force since 1 January 2025. The provision requires prior information and consent meeting GDPR standards, with two exceptions: technology used solely to transmit a communication, or technology strictly necessary to deliver a service you have explicitly requested. The rule applies regardless of whether what’s stored counts as personal data.
We apply a strict reading of this: wherever we can deliver a working website without storing anything on your device, we do — rather than relying on the statutory exemptions.
What is actually stored
| Technology | Type | Purpose | Legal basis |
|---|---|---|---|
aiflow_lang | Functional cookie, up to 12 months | Remembers your explicitly selected language | Set only when you use the language switcher. Secure, HttpOnly, SameSite=Lax. |
| Matomo (visit statistics) | Nothing stored on your device | Anonymised, aggregated visit statistics | Runs with disableCookies enabled — neither cookies nor localStorage are used to identify visitors. Our assessment is that this falls outside the scope of § 3-15, which concerns storage in / access to your device; neither Nkom nor Datatilsynet has published guidance specifically addressing cookieless analytics |
| Cloudflare (infrastructure) | Technical/security-related cookies may occur | Protect the site against abuse (e.g. denial-of-service attacks) | Strictly necessary to deliver the service — covered by the exception |
We do not use any third-party advertising or tracking cookies. No consent banner is shown because none of the technology actually in use requires one.
Checking and deleting stored data yourself
You can view and delete anything the site has stored at any time via your browser’s developer tools (Application → Storage), or clear all site data via your browser’s privacy settings. Deleting aiflow.lang simply means the site shows the default language (English) on your next visit.
Changes
If we introduce technology in the future that requires consent under § 3-15 — for example a full marketing tracking tool — we will actively obtain consent before the technology is used, in line with Datatilsynet’s guidance, and update this page accordingly.
Contact and supervision
Questions: contact@ai-flow.no. Supervisory responsibility for § 3-15 is shared between:
Norwegian Communications Authority (Nkom) — nkom.no Datatilsynet — datatilsynet.no
Matomo respects the browser Do Not Track signal. Automatic language selection uses the browser language; country is a fallback when that preference is absent. No browser location permission is requested.