Privacy Policy

Rivenholt AS (Norwegian organisation number 938 155 364) operates thebjjstory.com and is the data controller for personal data collected through the site.

Contact: Rivenholt AS

Email: post@thebjjstory.com

We collect the following personal data:

Account features are currently switched off. Sign-in, comments and favourites are not available on this site, so no new account data is being collected. Reporting an error on a profile does not require an account and is covered under Feedback below. The entries below describe what the account features collect when they are enabled, and remain accurate for the small amount of data recorded before they were switched off. You may request deletion of that data at any time.

• Google account (via OAuth login): name, email address, and Google user ID (sub). This is received directly from Google when you consent to sign in.
• Favorites: when you save a favorite, the combination of your user ID and the person ID (the person you bookmarked) is stored in our database.
• Optional measurement (currently off): No requests are sent to Google Analytics, Vercel Analytics, advertising services or a consent manager. The former page-visit counter is also disabled and is not used to measure this release.
• Feedback: if you send us a message through the contact form, or report an error from a profile page, we store the message text, plus your name and email if you choose to provide them. Name and email are optional — leave them empty and the message is anonymous. A report sent from a profile page also stores which profile and page it was about, the kind of correction, and the source link you provide.

We process personal data for the following purposes:

• Login and authentication: to identify you as a user and provide access to personalised features. Legal basis: contract (GDPR Art. 6(1)(b)).
• Saving favorites: to remember which people you have saved across visits. Legal basis: contract (GDPR Art. 6(1)(b)).
• Handling feedback: to respond to enquiries and improve the content. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
• Optional measurement: No optional visitor measurement is active. Before enabling it, we require an owner-reviewed plan covering consent, providers, the legal basis and how long data is kept.

• User data (name, email, Google ID) is kept for as long as your account is active. You may request deletion at any time.
• Favorites are automatically deleted if your account is removed.
• Feedback is kept for as long as it is relevant to improving the site, and deleted thereafter.
• No optional visitor measurement data is collected while these features are disabled.

Under the GDPR you have the following rights regarding your personal data:

• Access: you may request a copy of the data we hold about you.
• Rectification: you may ask us to correct inaccurate data.
• Erasure: you may request that your data be deleted (the “right to be forgotten”).
• Data portability: you may request your data in a machine-readable format.
• Objection: you may object to processing based on legitimate interest.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at post@thebjjstory.com. You also have the right to lodge a complaint with your national supervisory authority (e.g. datatilsynet.no in Norway) if you believe we are processing your data unlawfully.

If you are profiled on this site: The rights above apply to data we hold about you as a visitor or account holder. If you are one of the people this site publishes biographical content about — whether or not you have ever used the site — you can request a correction, dispute a source, ask for a profile to be unpublished, or file a complaint through the same contact form or email. We aim to respond and, where a request is well-founded, to act on it without requiring legal process.

We use the following sub-processors that may handle personal data on our behalf:

• Supabase (Supabase Inc.): hosts the site database and its enabled features. The former page-visit counter is disabled and cannot be used by visitors.
• Vercel Inc.: hosts and serves the website, processing ordinary request and connection data. Its separate visitor analytics service is not loaded.
• Google LLC: Google sign-in is disabled along with account features. No requests are sent to Google Privacy & Messaging, AdSense or Google Analytics. Google’s Privacy Policy.

We do not sell personal data. Optional advertising and measurement remain disabled.

Account features are disabled. We load no consent manager, advertising tags or optional analytics tags. The language is set by the page address, without automatic language detection or a language cookie. There is no active privacy-choice control because no provider consent record is created.

If you have questions about how we handle personal data, please contact us at:

Email: post@thebjjstory.com