We treat your shooting data and personal information with the same precision you bring to the firing line. This page explains what we collect, why, and how you stay in control.
The data controller responsible for the personal data processed through Popper is:
We collect only what we need to deliver the service. The categories below describe the data Popper processes:
We process your personal data exclusively to provide and improve Popper. Specifically:
Our processing is grounded in the EU General Data Protection Regulation (GDPR) as incorporated in Norwegian law through the Personopplysningsloven:
Processing required to deliver the Popper service that you have signed up for.
Optional data like wellness logs, notes and marketing-style communications are based on your consent, which you can withdraw at any time.
Operational logs, fraud prevention and product improvement, balanced against your rights and freedoms.
We keep your data for as long as your account is active. Different categories follow different retention periods:
| Category | Retention |
|---|---|
| Account, matches, results, drills, equipment | Until you delete your account |
| Wellness logs and notes | Until you delete the entry or your account |
| Weapon log entries | Retained while documentation may be required by Norwegian firearms law |
| Security and audit logs | Up to 12 months |
| Backups | Rotated within 30 days |
When you delete your account, personal data is removed from our active systems within 30 days, except where retention is required by law.
We never sell your data. We share it only with trusted processors who operate strictly on our instructions under a data processing agreement:
Application servers and databases hosted within the EU/EEA.
Used to deliver password resets and service notifications.
Aggregated, anonymized usage metrics. IP addresses are anonymized and only loaded after you opt in via the cookie banner. Transfers covered by EU Standard Contractual Clauses.
We may disclose data to public authorities such as the Norwegian Police if compelled by valid legal process.
We take technical and organisational measures appropriate to the risk of processing:
Under GDPR you have the following rights regarding personal data we process about you:
Obtain a copy of the personal data we hold about you.
Correct inaccurate or incomplete information from your profile.
Request deletion of your account and associated data.
Receive your data in a structured, commonly used and machine-readable format.
Object to processing based on our legitimate interests.
Ask us to limit how we process your data in certain circumstances.
To exercise any of these rights, contact us at media@nybrott.no. We respond within 30 days.
If you believe we are processing your personal data unlawfully, you may file a complaint with the Norwegian Data Protection Authority:
We may update this policy as the service evolves or to reflect changes in applicable law. Material changes will be highlighted on this page and, where appropriate, communicated by email. The "Last updated" date at the top of this page always reflects the latest version.
Questions about this privacy policy or how Popper handles your data? Get in touch: