Book Local

Privacy

What we collect, what we deliberately don't, and your rights — in plain language.

At a glance

  • Our everyday analytics are anonymous and cookie-free (Plausible) — no consent needed. When we run ads, we also use Google Analytics to measure them, but only if you consent via the banner.
  • We never sell data. Book Local is operated by Bilberry, and data stays inside our own systems.
  • If you have a supplier account, we store what's needed to run it — nothing more.
  • Booking payments go directly to the operator; we never touch your money.

What we track

On public pages we use Plausible Analytics — a privacy-friendly alternative allowed without a consent banner in the EU (confirmed by CNIL and ICO among others).

Per pageview, we collect aggregate, non-identifying signals like:

  • The URL you visited
  • Referrer URL (where you came from, if applicable)
  • Device type (desktop / mobile / tablet) and browser type
  • Country (not city or precise location) — derived from the IP, which is not stored

All of this is aggregated into counters. We cannot track an individual user over time — even if we wanted to, the data doesn't exist.

When we test advertising, we additionally use Google Analytics on public pages — solely to measure the ads. It's off by default (Google Consent Mode v2, everything set to “denied”) and only activates when you press “Accept” in the consent banner. If you decline, the tag loads without storing any Google cookies or identifiers. You can change your mind at any time by clearing the choice in your browser.

What we deliberately don't

  • No cookies without your consent — Plausible is always cookie-free; Google Analytics is only set if you accept
  • No cross-site tracking unless you consent to ad measurement
  • No selling data to third parties
  • No IP logging in Plausible — the IP is hashed with a daily-rotating salt that's discarded the same day
  • No forced "click accept" — the everyday, cookie-free analytics never require consent; the banner is only for Google ad measurement, and you can always decline

Your browser sends Do Not Track? Plausible respects it automatically.

If you have an account

For supplier accounts we store:

  • Name, email, hashed password
  • Company info — legal name, address, logo, contact info — for your public supplier page
  • An API token that lets us pull products and availability from your Bilberry system
  • Settings and consents you've given us (e.g. accepting the Book Local mission)

These are used only to run your account. We don't share them with other suppliers.

Supplier data

Products, prices, and availability sync from your Bilberry system and appear publicly on Book Local only if you've opted in via the marketplace toggle. Other suppliers see the same thing any visitor does — nothing more.

Curator Collections may contain products from other suppliers. No approval is required from the other side — the products are already public via the marketplace flag.

Bookings

Guests who book an experience pay directly to the operator's own payment processor (configured in Bilberry). Book Local never routes the money — we only receive a notification that the booking happened, to calculate commission on portal bookings.

Guest data (name, email, phone) at booking time goes directly to the operator and their Bilberry system. Book Local itself doesn't store this.

ChatGPT & AI assistants

Book Local runs a ChatGPT app (an MCP server) so you can discover Norwegian experiences from inside ChatGPT and other AI assistants. It's read-only — no login, no account, no personal data required.

When an assistant calls one of our tools (search, availability, and so on), we log the call to improve search quality and monitor reliability:

  • The tool name and your sanitised search parameters (long text clipped to 512 characters)
  • The language (en/no), the number of results, and how long the call took
  • A one-way hash of the requesting IP (SHA-256 salted with our app key) — it can't be reversed to an IP or used to identify you, and it rotates when our key rotates

We don't store the conversation, your identity, or any account data — there are no accounts on this surface. These logs rotate out after 14 days; aggregate counts feed an internal quality dashboard. Bookings still complete on booklocal.no and go directly to the operator.

Your rights (GDPR)

Since we process limited personal data, these rights are most relevant for supplier accounts:

  • Access — request a copy of the data we hold on you
  • Rectification — update incorrect data via My company or contact support
  • Erasure — request that your account and data be removed (within 30 days)
  • Data portability — receive your data in a machine-readable format
  • Complaint — complaints can be filed with the Norwegian Datatilsynet (Data Protection Authority)

Contact

Privacy questions or data requests: support@bilberry.no.

Data controller is Bilberry, which operates and develops Book Local.