Privacy Policy
Who we are
Actual Taste (actualtaste.com) is operated by Msales Norway AS (org. no. 919 627 433, Kristiansand, Norway), the controller for personal data on the site. Questions about this policy or your data: [email protected].
What we store
- What you type. The message you write, and the poster details we derive from it (headline, items, prices, dates, contact details), are stored so we can render, re-render and show you your posters.
- Account data (only if you sign in): your email address, your language choice, your credit balance and a ledger of how credits were bought and spent.
- Business profile (only if you save one): the business name, city, phone, address, website, payment details and logo you choose to keep for reuse.
- Posters and previews: the images and PDFs we generate for you, stored in our file storage under a random identifier. Previews are watermarked; unlocked posters are yours to download.
- Billing: payments are processed by Stripe (cards) or Dintero (Vipps and cards). We store the purchase amount, currency and the provider's reference, never card numbers.
- Technical: IP addresses are used to rate-limit free previews. We keep an event log (poster made, purchase, error) for running the service. We run no advertising trackers.
- Analytics: Google Analytics 4, described below. Cookies only with your consent.
Third parties that process your data
To make a poster we send the text you typed to AI providers: Anthropic (to turn your message into poster fields) and OpenAI (to generate the single hero image). Only the description of the object is sent for image generation, never your contact details. These providers process the text to return a result and, per their business terms, do not train on it. We do not send anything to them that you have not typed into the poster yourself.
Files are stored on Cloudflare R2, the database and sign-in run on Supabase (AWS eu-north-1, Stockholm), the site runs on DigitalOcean (Amsterdam) behind Cloudflare, and sign-in emails are sent through Resend.
What we do not do
We do not sell your data, show ads, or use your posters to promote Actual Taste without asking you first. If we would like to show a poster you made as an example, we will ask.
Your rights
Under the GDPR you can access, export, correct and delete your data. Email [email protected] for a data export or account deletion and we will sort it out promptly. Deleting your account removes your profile, businesses and posters; purchase records are kept as long as bookkeeping law requires. You can also complain to the Norwegian Data Protection Authority, Datatilsynet.
Analytics (Google Analytics)
We use Google Analytics 4 to see how the site is used, such as which pages are read, where visitors come from and how many go on to make or buy a poster. Google cookies are only set if you click "Accept".
If you click "Decline", or make no choice, no cookies are set. Google still receives basic, anonymous signals without cookies or identifiers (Google Consent Mode), used to estimate overall traffic. Google Analytics does not store IP addresses. We never send Google what you type, your email address or your business details.
Google Ireland Ltd. is our processor. Data may be transferred to the US under the EU–US Data Privacy Framework. Analytics data is kept for 14 months. The legal basis is your consent (GDPR art. 6(1)(a)), which you can withdraw at any time.
Cookies and local storage
_gaand_ga_*(Google Analytics, 2 years). Only with consent.msale_consent_v1(stored in your browser). Remembers your choice so we don't ask on every page.
We also use a random cookie so a preview you make before signing in can be attached to your account afterwards, browser storage for your sign-in session and language, and session storage so your work survives a reload. No advertising or cross-site tracking cookies. You can change your analytics choice at any time with Cookie settings at the bottom of the page. We measure traffic with Cloudflare Web Analytics, which is cookieless and does not fingerprint or identify visitors, and we count page views on our own server against the same random cookie to see how many visitors go on to make a poster.
Changes
If this policy changes in a way that matters, we will say so on the site. The effective date above always reflects the current version.