Privacy Policy

Who are we?

Ibenta Filipstad, org. no. 919 775 335, is the data controller for personal data collected via ibenta.no. You can reach us at [email protected].

What do we collect?

Apart from the ad measurement described below, we only collect personal data you give us yourself: through the contact form, when you request the website brief template or run the website audit under Tools, and when you use the AI chat. When you order, we also store your domain choice with the order or enquiry. In the main that is:

• Name
• Email address
• Company name (optional)
• Message

We use Matomo, running on our own server (stats.ibenta.no), to understand visiting patterns on the site. The standard measurement runs without cookies: it stores nothing on your device, the IP address is anonymised before it is stored, and no data is shared with third parties. Its figures are aggregated and do not identify individual visitors. If you say yes to recording (see “Recording of your visit” below), this does not apply to the recording: a recording of your visit is then also stored, linked to the visit in Matomo.

If you request the website brief template at /tools/website-brief, we store your name, email address, business if given, and your budget and start choices as an enquiry, and email you the template. The address is not used for newsletters.

If you run the website audit at /en/tools/website-audit, we store the web address you entered and the result for 30 days, and send the address to Google PageSpeed Insights for the speed measurement. If you unlock the full report, we store your name, email address and company (if given) as an enquiry and send you the report by email. The report is deleted 12 months after the unlock, or earlier if the enquiry is deleted. We only contact you about the findings if you ticked the box for it; that box is optional. The address is not used for newsletters.

Ad measurement and consent

We advertise on Facebook, Instagram and in ChatGPT. To see which ads work, we can use the measurement pixels from Meta and OpenAI, and to make the site better we can record how it is used. All of it is described below, and none of it loads until you have said yes.

You can allow or decline this measurement without affecting the site or forms. The choice covers all three. We store it locally in your browser for six months, then ask again. You can change or withdraw your consent using “Measurement and recording” at the bottom of the page or here. You can also delete the cookies in your browser settings.

Ad measurement (the Meta pixel)

With your consent, the site uses the Meta pixel from Meta Platforms Ireland Ltd. to measure how our ads on Facebook and Instagram perform, and to show them to people who may be interested. The pixel stores a cookie (_fbp) in your browser and sends Meta information about the visit: which pages you view, and whether you request a free draft, send an enquiry, start or complete an order, with the order amount. Meta also receives your IP address and information about your browser. We do not send your name, email, phone number or anything you type into the forms. Meta may link the information to your Facebook or Instagram account and may transfer it to the United States. We and Meta are joint controllers for the collection and the transfer to Meta. For Meta's further use, Meta is the controller, see Meta's privacy policy at facebook.com/privacy/policy. If you decline, the pixel is not loaded. If you withdraw your consent, we stop the pixel and delete _fbp. You control the ads you see in the ad settings on Facebook and Instagram.

ChatGPT ad measurement (OpenAI)

With your consent, we use OpenAI's measurement pixel to understand how our ads in ChatGPT perform. It sends OpenAI page views and events when you submit an enquiry or request a free website draft, along with technical information such as your IP address and browser. We do not add your name, email, phone number or form text to our event messages. Each event is marked to opt out of future personalisation.

The pixel uses two first-party cookies on ibenta.no: __oppref stores the reference linking a visit to an ad for 30 days after it is written. Each time the pixel captures an ad reference in the page address, this period starts again. __obref stores a random browser reference for 365 days after creation. Browser restrictions or clearing cookies may shorten these periods. These periods describe cookie storage, not how long OpenAI retains conversion data.

Read OpenAI's privacy policy

Recording of your visit

With your consent, we record how you use the site: which pages you view, where you click and scroll, and how the pages look along the way. We use the recordings, and heatmaps made from them, to find what is hard to understand or use. Everything you type into form fields is hidden in your browser before anything is sent, and so are places where the site shows the name, email, company name or domain you have entered. The AI chat, audit reports and pages with an order number are not recorded. The recordings are stored on our own server (stats.ibenta.no), are not shared with anyone and are deleted after 30 days. Where you clicked and how far you scrolled, without the recording itself, is kept for 90 days for the heatmaps. While a recording is in progress, a temporary recording ID is kept in your browser's session storage. It disappears when you close the tab, and no cookies are set. If you withdraw your consent, the recording stops and the recording of your current visit is deleted. An overview of the recordings (time, pages, device type) and the click points for the heatmaps may remain in our backups for up to 12 months. The recordings themselves do not.

What do we use the data for?

Personal data is used to respond to your enquiry and deliver what you asked for: an answer from us, the website brief template, the website audit report or answers from the AI chat. We do not sell it and do not send newsletters. Sales follow-up from us happens only where you said yes to it yourself, in the optional box in the website audit; otherwise we only reply when you get in touch. Some providers process data on our behalf to deliver the service: Google PageSpeed Insights receives the web address you enter in the website audit, and the AI chat sends your question to OpenAI or Google as the section on the chat describes. None of them may use the data for their own purposes beyond what is stated there. The domain check in the order flow sends domain names to Norid (.no) or Verisign (.com) for lookup. We cache only domain names and registration status for ten minutes; your name and email are not sent to the registries.

Storage and deletion

We do not store your data longer than necessary to respond to your inquiry and complete any engagement. To have your data deleted, contact us at [email protected].

AI chat (Ibenta AI)

The site has an AI chat (“Ibenta AI”). Messages you type in the chat are processed by OpenAI and Google (Gemini) to generate answers. Traffic sent to OpenAI may be used by OpenAI to improve their models. Do not share sensitive personal data in the chat. The chat also reminds you of this.

Before the chat starts we ask for your name, email and optionally a domain. This information is stored by Ibenta as an enquiry and emailed to us. It is not shared with the AI providers. When the conversation ends, Ibenta receives a short summary of what was discussed. The conversation itself is stored only in your browser and is deleted when the tab closes.

Your rights

You have the right to:

• Request access to the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data

Send us an email at [email protected] and we will respond within a reasonable time.

Right to complain

If you have objections to how we process your personal data, you can file a complaint with the Norwegian Data Protection Authority at datatilsynet.no.