Privacy at cardff.uk

Last updated 12 August 2026

This policy explains what we collect, why, and the rights you have. The controller is the operator of this site. There is no registered company number on file for the service. Questions go to personvern@brgen.no.

What we collect

Account: your email and chosen display name at sign-up. Passwords are stored only as a salted hash.
Account activity: comments and watch lists you create on ports.
Technical: a session cookie that keeps you signed in, and aggregated, non-identifying operational logs for security and debugging.

Legal basis

We process account data to perform our contract to provide the service (GDPR Art. 6(1)(b)), security and operational logs under legitimate interest (Art. 6(1)(f)).

Your rights

You have the right to access, rectify, erase and port your data, and to object to processing. You can export your data and request deletion from account settings, or contact us. You may lodge a complaint with your national data-protection authority.

Storage and sharing

We never sell personal data. Data is held on the production server in Europe and kept while your account is active. If you delete your account, personal data is removed within 30 days, except what we must retain for legal reasons.