Privacy & Cookies

Last updated: 12 September 2026

Template for review. This is a generic starting point, not legal advice. Because you are in the EEA, have a qualified professional check it against the GDPR and Norwegian rules before you rely on it.

1. Who we are

Manifest ("we") operates this catalogue. For privacy questions, contact REPLACE-WITH-YOUR-EMAIL.

2. What we collect

Account: your email address, so you can sign in. If you use Google or Apple sign-in, we receive your email and a basic profile identifier from them.
Your activity: the items you save and the comments you post.
Technical: standard server and security data (such as IP address) processed by our hosting provider.

We do not collect payment details. Purchases happen entirely on your agent's site.

3. Cookies and local storage

We use only what the site needs to work:

Sign-in	Set by our authentication provider (Supabase) to keep you logged in.
Preferences	Your language, currency, theme and saved items are stored in your browser (local storage).

We do not currently use advertising or third-party tracking cookies. If that changes, we will ask for your consent first.

4. Who we share with

Service providers that run the site on our behalf: Supabase (accounts, database), Cloudflare (hosting, security), and Google or Apple if you choose their sign-in. We do not sell your data.

5. Your rights

Under the GDPR you can request access to your data, correction, deletion, or a copy to take elsewhere, and you can object to certain processing. To exercise any of these, email us. You can also delete your comments and saved items yourself while signed in, and you may complain to the Norwegian Data Protection Authority (Datatilsynet).

6. Keeping your data

We keep account data while your account is active and delete it on request. Comments remain until you or we remove them.

7. Children

The site is not directed at children under the age required for consent in your country.

8. Changes

We will post any updates on this page with a new date above.