Last updated: September 9, 2026
This is an English translation provided for convenience. The Norwegian version (Personvernerklæring) is the authoritative version; in case of any discrepancy, the Norwegian text prevails.
This privacy policy explains how Minnehimmel™ ("we", "us") processes personal data when you use the service. It covers three surfaces:
A memorial page is the same page wherever it was created. One made on an iPhone is the same page on Android and on the web. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
The data controller for the personal data is:
When you create an account (page owner):
How you sign in depends on where you are:
From the sign-in we receive your name, email address and a unique user ID. We never receive your password. If you use Apple's Hide My Email, we only receive an anonymized forwarding address.
Guest mode: In both apps you can choose "Fortsett som gjest" (continue as guest) to visit a memorial page without an account. An anonymous user ID is then created with Firebase. We record which platform and app version was used, and the time, as statistics only. A guest account contains no information about who you are. To write a greeting you must sign in.
When you create a memorial page:
When you or others light a star / write a greeting:
When you visit a memorial page on the web (app.minnehimmel.no):
When you order a physical QR plate:
Technical information:
Location: If you grant permission, the device's approximate location is used only locally on the device to display the moon at the correct angle. The location is not stored by us and not shared. You may refuse access without losing functionality (the moon is then shown for a default location).
About the deceased: As a general rule, the GDPR does not apply to information about deceased persons. Information on a memorial page may nevertheless indirectly constitute personal data about surviving relatives; such data is processed in accordance with this policy.
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and delivering memorial pages, accounts and purchases | Performance of a contract, Art. 6(1)(b) |
| Displaying greetings and photos you submit | Your action/contract, Art. 6(1)(b) (and consent where applicable, Art. 6(1)(a)) |
| Operation, security and abuse prevention | Legitimate interest, Art. 6(1)(f) |
| Complying with legal obligations (e.g. bookkeeping) | Legal obligation, Art. 6(1)(c) |
Private greetings: the text of a greeting marked "private" is stored so that only the person who wrote it has access – not other visitors, not the family, and not the administrator.
We do not sell personal data. We use the following sub-suppliers (data processors), who process data on our behalf under data processing agreements:
Some of these may transfer data outside the EEA (including to the USA). Such transfers take place on a lawful basis, e.g. the EU Standard Contractual Clauses (SCC) and/or the EU–US Data Privacy Framework.
Payment: Purchases inside an app are handled by the store you use – Apple in the App Store, Google in Google Play. Payment for a physical QR plate is handled by Stripe. In neither case do we receive card numbers or payment details.
We store personal data for as long as your memorial page or account is active. If you delete a memorial page, it is placed in a trash folder from which it can be restored, until it is permanently removed. Anonymous guest IDs on the website are deleted automatically after 30 days of inactivity. You may request deletion at any time (see section 6). Certain data may be retained longer where required by law.
You have the right to:
Delete it yourself:
Both delete the account and every greeting you have lit, including photos and private texts. Individual greetings can be deleted by opening them. If you cannot do it yourself, we will delete it manually: see delete your account and data, which explains the whole procedure.
Send other requests to post@minnehimmel.no. You also have the right to lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no).
The service is not directed at children. Personal data about children under 13 is not processed without the consent of a holder of parental responsibility, cf. the Norwegian Personal Data Act § 5.
We use technical and organizational measures to protect the data, including encrypted transfer, access control and database security rules.
We may update this policy. Material changes will be announced in the app or on minnehimmel.no.
Questions about privacy? Contact post@minnehimmel.no.
Delete account and data · Terms · Guidelines