Privacy Policy

Last updated: 5 November 2026 · Norsk sammendrag nederst.

This privacy policy explains how ActiveWEB AS (Lavaløkka 40, 3442 Hyggen, Norway) collects, uses, stores and protects personal data on the website activeweb.no and in the web applications and integrations ActiveWEB builds and operates for itself and its customers (together, the «Services»). This includes applications that connect to a Google account through Google Sign-In / OAuth, such as our Google AdSense reporting integration.

1. Data controller and contact

ActiveWEB AS is the data controller for the processing described here. Questions, requests and complaints: post@activeweb.no · +47 32 83 20 05 · Lavaløkka 40, 3442 Hyggen, Norway.

2. Data we collect

• Contact data you give us by e-mail, phone or forms: name, e-mail address, phone number, company and the content of your message.
• Customer and billing data for hosting, domain and development services: company name, organisation number, invoice address and contact persons.
• Technical data when you visit the website: IP address, browser type, requested pages and time of request, stored in server logs for security and operation.
• Google account data – only when you choose to connect a Google account to one of our applications (see section 3).

3. Google user data (Google Sign-In, Google AdSense and other Google APIs)

When you connect a Google account to an ActiveWEB application, Google shows you exactly which permissions (scopes) the application asks for, and nothing is accessed before you consent. Depending on the application, we may access:

• Basic profile information (scopes openid, email, profile): your name, e-mail address and Google account ID – used only to identify you and show which account is connected.
• Google AdSense data (AdSense Management API, read-only scope https://www.googleapis.com/auth/adsense.readonly): your AdSense account and publisher ID, sites, ad units, payments overview and performance reports (such as earnings, impressions, clicks and page views).

How we use it: Google user data is used only to provide the features you have asked for – for example to show your AdSense performance and earnings reports in a dashboard for you or for the customer you work for, and to keep that report up to date. We do not change anything in your AdSense account, we do not create or modify ads, and we do not access payment details beyond the read-only payments overview the API provides.

Limited Use: ActiveWEB’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We do not sell Google user data.
• We do not use or transfer Google user data for advertising, including personalised, retargeted or interest-based advertising.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve or train generalised AI or machine-learning models.
• No human at ActiveWEB reads your Google user data, except with your explicit permission (for example when you ask us for support), when necessary for security purposes such as investigating abuse, or to comply with applicable law.
• Google user data is only transferred to others when necessary to provide or improve the features you use, to comply with law, or as part of a merger or acquisition with the same protections.

4. Storage and protection

Data is stored on servers we operate ourselves in data centres in the EU/EEA (Germany). Access tokens and refresh tokens from Google are stored encrypted (libsodium/AES-grade encryption) in our authentication service and are never shown in the browser or shared with third parties. All traffic is encrypted with HTTPS/TLS. Servers are protected by firewalls, restricted administrator access with SSH keys, and regular security updates.

5. Retention and deletion

• Google tokens and Google user data are kept only while your Google account is connected. When you disconnect the account in the application, or ask us to, the tokens are deleted and revoked at Google, and cached report data is deleted within 30 days.
• You can also remove the application’s access at any time at myaccount.google.com/permissions.
• Contact data is deleted when it is no longer needed to answer you, normally within 12 months. Customer and billing data is kept as long as the customer relationship lasts and as required by Norwegian accounting law (up to 5 years).
• Server logs are deleted automatically after a maximum of 90 days.

6. Sharing

We do not sell personal data. We only share data with processors that help us run the Services (for example our hosting and e-mail infrastructure and Cloudflare for network security), under data processing agreements, or when required by law. Google user data is not shared with anyone except as described in section 3.

7. Legal basis (GDPR)

We process data to perform a contract with you or your company (GDPR art. 6(1)(b)), on the basis of your consent – for example when you connect a Google account (art. 6(1)(a)), to comply with legal obligations such as accounting rules (art. 6(1)(c)), and on our legitimate interest in operating and securing the website (art. 6(1)(f)).

8. Cookies

activeweb.no uses only the cookies needed for the website to work and for logged-in administrators. We do not use advertising cookies. Some pages may embed content from third parties (such as maps or videos) that set their own cookies when loaded.

9. Your rights

You have the right to access, correct and delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Contact post@activeweb.no. You may also complain to the Norwegian Data Protection Authority, Datatilsynet.

10. Changes

We will update this policy when our Services change. The date at the top shows the latest version. Significant changes affecting Google user data will be notified in the application before they take effect.

Norsk sammendrag

ActiveWEB AS behandler kontakt-, kunde- og teknisk data for å levere tjenestene våre, og – kun når du selv kobler til en Google-konto – Google-data (navn, e-post og lesetilgang til Google AdSense-rapporter) for å vise rapportene du har bedt om. Google-data selges aldri, brukes aldri til reklame eller AI-trening, lagres kryptert på egne servere i EU/EØS og slettes når kontoen kobles fra. Du kan kreve innsyn, retting og sletting på post@activeweb.no. Se også våre vilkår.