Cookies

Effective: 11 October 2026

This notice explains how Klarte.no (“Klarte”, “we”, “us”) uses cookies and similar technology on the marketing site (klarte.no), the sign-in pages, and the related platform pages we operate.

Separate from businesses’ booking pages. When a customer books with a business that uses Klarte, that business is the controller for the booker’s data. Their public privacy notice covers the booking experience. This notice covers only Klarte’s own website and the platform account areas.

Questions: hjelp@klarte.no

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site work, remember choices, or understand use. Our cookies cannot run programs, install malware, or read unrelated files on your device.

2. Types of cookies we use

Strictly necessary cookies

Required for security, load balancing, signed-in sessions, and to remember your cookie choices. These cannot be switched off if you use the site. Without them, core features (such as sign-in) may stop working.

Examples on the platform: session identifiers for the signed-in dashboard, storage of cookie consent, and CSRF and session security tokens.

Language choice. When you choose Norwegian or English yourself, only the value no or en is stored in the first-party cookie klarte_landing_lang. It is set only after you choose a language, used only to show pages in that language, contains no tracking ID, and lasts for six months. Using the site again within that period renews the six months. It is strictly necessary to honour that choice (ePrivacy Article 5(3) / Norwegian ekomloven § 2-7b) and is not used for analytics or marketing.

Functional cookies

Remember choices, such as dismissing notices or interface preferences. Optional — if they are blocked, the site still works, but those choices may reset.

Statistics without a cookie

To see whether a visit is direct, from Google, from an article, or from a tracking link we published ourselves, we count the landing on the marketing site. We store the date, channel, tracking link if any, the page path, and — only when the referrer is another site — the domain name. We do not store device type. A small number of visits could otherwise point back to one person, for example the only booking that day. We do not store an IP address, the search query, ad click IDs (such as gclid or fbclid), or an identifier that can be tied to you. The basis is legitimate interest in knowing which of our own channels actually bring visits (GDPR Article 6(1)(f)). The figures are deleted after 180 days. This uses no cookie and does not depend on the choices in the banner. Ordinary server operations logs are a separate security measure and are not used in this overview.

Analytics cookies (optional)

We do not set an analytics cookie. The switch in the banner only stores your choice, so we cannot turn an analytics cookie on later without asking again. The channel statistics above do not use this switch. Analytics of bookers inside a business dashboard is governed by the relationship between the business and its customers, not by this notice.

Marketing cookies (optional)

If you accept marketing, we set the first-party cookie klarte_mkt_id. The value is a random id, not your name or email. We can then also store the channel, tracking link, page path, referrer domain, coarse device type, browser family, and operating system, tied to that id. We use it to see which channel works, including when an app hides the referrer. We do not use ad networks and do not share this with Meta, Google Ads, or similar. The cookie lasts 180 days. The basis is consent (Article 6(1)(a) and Norwegian ekomloven § 2-7b). If you withdraw consent, we delete the cookie and the rows tied to the id. You can also delete the cookie in your browser. We ask again when the purpose changes.

3. Third-party services

We may use infrastructure and content-delivery providers that set or process technical data. The current public list is on sub-processors, including:

Hosting (Hetzner) — EU VPS for the Klarte platform.
Email out (Bird) — transactional email from noreply@klarte.no to business users and bookers (confirmations, reminders). The address does not accept replies.
Email in (ImprovMX) — forwards email to hjelp@klarte.no, kontakt@klarte.no, and replies sent to noreply@klarte.no, to Klarte’s mailbox.
SMS (Bird) — transactional SMS reminders when a business turns on SMS notifications and the platform allows sending.
Interface delivery (CDN) — Tailwind CDN and cdnjs (icons) on some pages. Those providers may receive your IP address when resources load. Fonts (Plus Jakarta Sans, Geist) are self-hosted from Klarte (/assets/fonts/) — no request to Google Fonts or the Fontshare CDN.
Payments (Stripe) — subscription billing for business accounts. If you pay a business for an appointment on a booking page, Checkout runs at Stripe on the business’s connected account (they are the seller), not as a sale by Klarte.
Google sign-in (optional) — only if you choose Sign up with Google or Sign in with Google. You are redirected to Google’s domains to authenticate. Google may set its own cookies there under Google’s rules. Klarte then receives a limited identity profile (Google user ID, verified email, name if provided) to create or open the business account. Email-and-password sign-in does not use Google for authentication. Details: platform privacy notice section 2a and sub-processors.
Two-factor authentication — TOTP QR codes are generated in your browser with Klarte scripts. The two-factor secret is not sent to a third party that generates QR images.

We do not sell cookie data. We share information with processors only as needed to run the service, under data processing agreements.

4. Transfers outside the EEA

Where a provider processes information outside the EEA, we use appropriate safeguards, such as the EU standard contractual clauses, where required.

5. How to block or delete cookies

You can change your choices at any time in the cookie banner (“Manage choices”) on the marketing site, or by deleting cookies in your browser:

Note: If you block strictly necessary cookies, sign-in or the dashboard may stop working.

6. Your rights

For personal data Klarte processes as controller (your account), see the platform privacy notice. You may complain to your supervisory authority (for example the Norwegian Data Protection Authority, Datatilsynet).

7. Changes

We may update this notice. Material changes are shown by updating the effective date and, where appropriate, by asking again for consent to optional cookies.