Skip to content
The BJJ Story

Privacy Policy

Optional advertising and measurement are disabled in the production configuration for this release.

1. Data Controller

Rivenholt AS (Norwegian organisation number 938 155 364) operates thebjjstory.com and is the data controller for personal data collected through the site.

Contact: Rivenholt AS

Email: contact@thebjjstory.com

2. Data We Collect

We collect the following personal data:

Account features are currently switched off. Sign-in, comments, favourites and edit suggestions are not available on this site, so no new account data is being collected. The entries below describe what those features collect when they are enabled, and remain accurate for the small amount of data recorded before they were switched off. You may request deletion of that data at any time.

  • Google account (via OAuth login): name, email address, and Google user ID (sub). This is received directly from Google when you consent to sign in.
  • Favorites: when you save a favorite, the combination of your user ID and the person ID (the person you bookmarked) is stored in our database.
  • Optional measurement (currently off): No Google Analytics, Vercel Analytics, advertising, consent-manager or page-visit RPC request is sent. The retired visit counter is not used as release measurement.
  • Feedback: if you send us a message through the contact form, we store the message text, plus your name and email if you choose to provide them. Name and email are optional.

3. Purpose and Legal Basis

We process personal data for the following purposes:

  • Login and authentication: to identify you as a user and provide access to personalised features. Legal basis: contract (GDPR Art. 6(1)(b)).
  • Saving favorites: to remember which people you have saved across visits. Legal basis: contract (GDPR Art. 6(1)(b)).
  • Handling feedback: to respond to enquiries and improve the content. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
  • Optional measurement: No optional measurement is active. Activation requires the complete owner-reviewed consent, provider, legal-basis and retention bundle.

4. Retention Period

  • User data (name, email, Google ID) is kept for as long as your account is active. You may request deletion at any time.
  • Favorites are automatically deleted if your account is removed.
  • Feedback is kept for as long as it is relevant to improving the site, and deleted thereafter.
  • No optional measurement data is collected in this mode.

5. Your Rights

Under the GDPR you have the following rights regarding your personal data:

  • Access: you may request a copy of the data we hold about you.
  • Rectification: you may ask us to correct inaccurate data.
  • Erasure: you may request that your data be deleted (the “right to be forgotten”).
  • Data portability: you may request your data in a machine-readable format.
  • Objection: you may object to processing based on legitimate interest.
  • Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at contact@thebjjstory.com. You also have the right to lodge a complaint with your national supervisory authority (e.g. datatilsynet.no in Norway) if you believe we are processing your data unlawfully.

If you are profiled on this site: The rights above apply to data we hold about you as a visitor or account holder. If you are one of the people this site publishes biographical content about — whether or not you have ever used the site — you can request a correction, dispute a source, ask for a profile to be unpublished, or file a complaint through the same contact form or email. We aim to respond and, where a request is well-founded, to act on it without requiring legal process.

6. Data Processors and Third Parties

We use the following sub-processors that may handle personal data on our behalf:

  • Supabase (Supabase Inc.): hosts the site database and enabled functional features. The unauthenticated page-visit counter is retired and unavailable to visitors.
  • Vercel Inc.: hosts and serves the website and therefore processes ordinary request and connection data. The separate Vercel Analytics component is not mounted.
  • Google LLC: Google sign-in is disabled with account features. Google Privacy & Messaging, AdSense and Google Analytics make no request. Google’s Privacy Policy.

We do not sell personal data. Optional advertising and measurement remain disabled.

7. Cookies

Account features are off, and this mode loads no consent manager, advertising tag or optional analytics tag. The URL alone determines the language; automatic language detection and the locale cookie are disabled. No privacy-choice control is active because there is no provider consent record to manage.

8. Contact

If you have questions about how we handle personal data, please contact us at:

Email: contact@thebjjstory.com