Privacy notice

Last updated: 20 September 2026

1. Responsibility and contact

Norske Tenner drives som frivillig arbeid i privat regi, uten organisasjonsnummer eller ansatte. Behandlingsansvarlig kan kontaktes på e-postadressen under.

Contact us about privacy, sign-in problems or missing email: post@norsketenner.no.

2. What becomes public

Once a post is approved, anyone can see its photos, name or nickname, municipality and text. Age and treatment estimates are shown if you provide them. Stories remain in the language in which they were written.

Photos and text about your dental health may be health information. When you submit, you consent in one step both to your post being published in the gallery and to the processing of the health information you share. The legal basis is Article 6(1)(a) and Article 9(2)(a) of the GDPR.

New posts and edits require administrator approval. Editing a published post removes it from the gallery until the changes are approved. Deletion does not require approval.

Samtykket til publisering omfatter også at media kan bruke bildene og historien i omtale av tannhelse, men ikke som skremselsbilder overfor barn og unge. Read the terms for media use. Ikke del opplysninger du ikke ønsker offentliggjort - media kan ha kopiert innhold før du sletter det hos oss.

3. Passkeys and a separate newsletter

You do not need to sign in before sharing. When you submit without being signed in, you receive a private access code and can choose to save a passkey. We store a random account ID and a verification value for the access code. If you save a passkey, we also store its public key and technical values used to verify sign-in. The account is linked to your posts. We do not receive fingerprints, facial data or your screen lock code from the passkey.

Your private passkey is stored on your device or by your chosen passkey provider. That provider controls any syncing. You can manage passkeys and your access code from My post. If you lose both your access code and all your passkeys, we cannot restore access by email. A signed-in session lasts up to 12 hours.

Sign-in data is used to provide access to the service you request, under Article 6(1)(b). Email sign-in and new email links to posts have ended.

The newsletter has its own subscription form and requires you to confirm your address with an email link. We store the encrypted address, a keyed address index and consent in a separate mailing list. The list contains no post reference or passkey account. You do not need to have shared a post to subscribe. The basis is consent under Article 6(1)(a).

The administrator can view recipient addresses through protected access and send updates. Emails are always sent using blind carbon copy (BCC) so recipients never see each other's addresses. Each recipient receives an individual unsubscribe link in the email. Unsubscribing deletes the subscription immediately without affecting posts or passkeys.

Vi lagrer ingen kobling mellom innlegg og nyhetsbrevadresser. Dette er likevel ikke en garanti mot gjenkjennelse dersom innholdet eller bildene du deler inneholder gjenkjennbare detaljer.

My post Email updates

4. Photos and cropping

Treatment estimates in PDF format are converted to images on your device. The PDF file is not sent to the server. You can redact both PDF pages and ordinary images with black boxes before submitting. The boxes become part of the uploaded image pixels. Review all pages and remove information you do not want to share.

After selecting images, you can crop them on the page before they are uploaded. Cropping happens in your browser. If you click “Use crop”, only the crop is uploaded. Otherwise, the whole image is uploaded. Uploading starts when you submit the form. Without JavaScript, you can crop images on your device before selecting them.

You choose whether to show your face in your dental photos. If you want to remain anonymous, crop the photo to show only your teeth and mouth. Keep names, addresses, identity numbers and other patient information out of treatment estimates. The crop tool does not automatically detect personal information.

The server creates new image files and removes metadata such as GPS location, phone model and time. Photos awaiting approval are available only to the signed-in contributor and to moderators.

Når et innlegg med prisoverslag godkjennes, leser en KI-tjeneste (Anthropics Claude) automatisk ut klinikkens navn, tannlegens navn, adresse, kontaktinformasjon og behandlinger/priser fra bildet. Bildet sendes til denne tjenesten for utlesingen. Utlesingen gjennomgås alltid manuelt av en administrator før den eventuelt vises i prissammenligningen på nettstedet - KI-tolkning kan inneholde feil. Pasientopplysninger skal aldri leses ut eller inngå i sammenligningen, selv om de er synlige på bildet. Prissammenligningen viser klinikkens og tannlegens navn åpent, siden formålet er å vise reelle prisforskjeller mellom tannleger.

5. Cookies, logging and anonymity

We use a technical session cookie for forms, security checks and sign-in. It has no fixed browser lifetime and is normally removed when the browser session ends. Access is always checked against the 12-hour deadline.

The newsletter uses a separate session cookie, nt_news, to secure subscriptions and unsubscriptions. It does not open the session for your posts.

When you choose a language using the flags, your preference is stored in the nt_lang cookie for up to one year. It contains only nb or en. You can change language at any time or delete the cookie in your browser.

This website does not use analytics tools, advertising trackers or Facebook widgets.

Serveren fører ingen tilgangslogger (access logs) eller feillogger over besøkende, og all lesing og navigasjon på nettstedet er anonym. Ved innsending av nytt innlegg og enkelte sikkerhetssjekker (som å hindre spam og for mange forsøk) brukes IP-adressen din kort: den gjøres om til en irreversibel nøkkel med kort levetid, som aldri kobles til innlegget eller kontoen din. Ved innsending av nytt innlegg sjekkes i tillegg hvilket land IP-adressen tilhører, gjennom et eksternt oppslag hos en oppslagstjeneste som ikke får noen andre opplysninger om deg - dette gjør vi fordi Norske Tenner handler om det norske tannhelsesystemet.

6. Leverandører

Email is sent from post@norsketenner.no via the website's own server directly to the recipient's email provider. When sending newsletter updates, emails are always sent using blind carbon copy (BCC) for full confidentiality between recipients. Technical error and access logs on the server are disabled.

The website is served through NetBird. NetBird may process technical connection information. A separate NetBird sign-in is not required to read the website.

Ved innsending av nytt innlegg sender vi IP-adressen til en ekstern oppslagstjeneste for å bekrefte at den er norsk, se punkt 5.

Godkjente prisoverslagsbilder sendes til Anthropic (leverandøren av Claude) for automatisk utlesing av klinikk, tannlege og priser, se punkt 2.

Skjemaet samler ikke inn navn, telefonnummer eller private meldinger. Du velger selv om du vil publisere ditt eget navn eller et kallenavn. Det tidligere kontakthvelvet med frivillige kontaktopplysninger fra en eldre løsning er avviklet, og innholdet i det er slettet.

We do not sell personal information. We may have to disclose information if required by law.

7. Retention and deletion

Posts, photos and their link to the passkey account are kept until the post is deleted or the website closes. This also applies to pending and rejected posts.

Når du bekrefter sletting på Mitt innlegg, fjernes innlegget og bildefilene fra den aktive løsningen med én gang. Du trenger ikke vente på administrator.

Passkey attempts expire after three minutes and are used only once. Unconfirmed newsletter sign-ups expire after 24 hours and are pruned on the next sign-up request. Confirmed sign-ups are kept until unsubscribed or discontinuation. Because the server keeps no access or error logs, no historical log files of your website usage are stored.

Published content may have been copied or saved by others. Deletion from our system does not remove those copies. Avoid details that make you easy to identify.

8. Your rights

You can withdraw consent to publication and processing of health information by deleting your post or contacting us. This does not affect the lawfulness of processing before you withdrew consent.

You can request access, correction, deletion, restriction and, where the conditions apply, a copy of your information in a portable format. You can object to processing based on legitimate interests. We normally respond within one month.

You can complain to the Norwegian Data Protection Authority. Read about your privacy rights.