Privacy policy

Who is responsible

Bluestream AS (org. nr. 934 586 301), Jernbanevegen 12, 7224 Melhus, Norway, is the controller for the processing described on this page. Bluestream LLC (Florida, USA) is our affiliated company.

Questions and requests about your data: info@bluestreamfl.com.

In short

Visiting the website

Hosting and server logs

The site is hosted by Vercel Inc. (USA). Like any web server, Vercel records the requests it serves: IP address, time, page requested, browser type and referring page. Vercel uses these logs to run and secure the service; we look at them only when investigating a problem. Legal basis: our legitimate interest in running a secure website (GDPR Article 6(1)(f)).

Vercel Web Analytics

We count page views with Vercel Web Analytics. It sets no cookies and stores nothing on your device. To tell visitors apart within one day it uses a hash created from the incoming request, valid for that day only, which cannot be traced back to you. We see aggregate numbers: pages, referrers, countries and device types. Legal basis: legitimate interest (Article 6(1)(f)).

Fonts

Pages load the Figtree, IBM Plex Sans and DM Mono typefaces from Google Fonts. Your browser fetches them from Google's servers, so Google receives your IP address and the address of the page you are on. See Google's privacy notice for Google Fonts. Legal basis: legitimate interest (Article 6(1)(f)).

Settings stored in your browser

Three values live in your browser's local storage: bs-theme (light or dark), bs-lang (English or Norwegian) and bs-consent (your choice in the cookie banner). They are never sent to us. They are needed to deliver what you asked for, so they require no consent under the Norwegian Electronic Communications Act (ekomloven) § 3-15.

Contact form

The form on the homepage sends your name, company (optional), e-mail address, subject and message to Formspree Inc. (USA), which forwards it to our mailbox. We use it to answer you. Legal basis: steps you ask for before entering an agreement, and our legitimate interest in answering enquiries (Article 6(1)(b) and (f)). We keep the correspondence while the matter is open and for a reasonable time afterwards.

Library links

When you follow a link from the Library, the request passes through our server so we can count which resources are used. We store the link's name, your browser's user-agent string, the referring page, a short hash of your IP address and the time. Some Library links are affiliate links; the shop you land on has its own privacy policy. Legal basis: legitimate interest (Article 6(1)(f)).

Advertising measurement (only with your consent)

We advertise our Academy guides on LinkedIn, and later on Facebook and Instagram. To see whether those ads bring visitors, and to show ads to people who have already visited, the public pages of this site can load two tags. Neither loads, and no request goes to LinkedIn or Meta, until you choose Accept in the cookie banner.

LinkedIn Insight Tag

• Provider: LinkedIn Ireland Unlimited Company (EU) and LinkedIn Corporation (USA). LinkedIn's privacy policy.
• What it does: loads a script from snap.licdn.com and reports the page address, referring page, IP address, browser and device characteristics, time of visit and, if you are signed in to LinkedIn, your LinkedIn cookie.
• Cookies it sets on this site: li_fat_id (30 days), li_giant (7 days), ln_or (1 day), oribi_cookie_test (session), oribili_user_guid (1 year), ar_debug (session).
• Purpose: measuring whether our LinkedIn ads lead to visits, building audiences of earlier visitors for later ads, and aggregate statistics about who visits.

Meta Pixel

• Provider: Meta Platforms Ireland Limited (EU) and Meta Platforms, Inc. (USA). Meta's privacy policy.
• What it does: loads a script from connect.facebook.net and reports the page address, referring page, IP address, browser characteristics, time of visit and, if you are signed in to Facebook or Instagram, your Facebook cookie.
• Cookies it sets on this site: _fbp (90 days), _fbc (90 days).
• Purpose: measuring whether our Facebook and Instagram ads lead to visits, and showing ads to earlier visitors.

What we do not do. LinkedIn's Enhanced Matching and Meta's Advanced Matching are off, and the tags never receive your name, e-mail address or phone number from us. We send no conversion events. The tags are not loaded on the Toolbox, sign-in, pricing or account pages.

Legal basis and withdrawal. Your consent (GDPR Article 6(1)(a) and ekomloven § 3-15). You can withdraw it at any time: open Cookie settings in the footer of any page and choose Decline. The tags then stop loading from your next page view, and the cookies they set on this site are deleted. Withdrawing does not affect what happened while consent was in place.

LinkedIn and Meta also use the data for their own purposes, as independent controllers, and may transfer it to the USA. Both are certified under the EU-US Data Privacy Framework.

The Toolbox: accounts, payments and analyses

Your account

Sign-up and sign-in are handled by Clerk, Inc. (USA). Clerk stores your e-mail address, your name, and your password or the Google account you sign in with, and sets the cookies that keep you signed in. When you create an account we store your user ID, e-mail address, name, token balance and product access in our database at Supabase, Inc. Legal basis: the agreement with you (Article 6(1)(b)).

Payments

Payments are taken by Stripe (Stripe Payments Europe, Ltd. and Stripe, Inc.). You enter card details on Stripe's checkout page; we never see them. We store your Stripe customer ID and a record of each purchase (pack, amount, status) so that tokens can be credited and the purchase accounted for. Legal basis: the agreement with you (Article 6(1)(b)) and our bookkeeping obligations (Article 6(1)(c)). Purchase records are kept as long as accounting law requires.

Analyses and AI processing

When you run a tool, the content you provide (the O&M manual or document you upload, the equipment or failure description you type, and your answers to clarifying questions) is sent to Anthropic, PBC (USA), whose Claude model produces the result. Anthropic processes the content on our behalf and, under its commercial terms, does not use it to train its models. We store the result, the document name and the equipment type in your account history so you can return to it, and deduct the token. Legal basis: the agreement with you (Article 6(1)(b)).

Please do not upload documents containing personal data about other people. The tools do not need it.

How long we keep account data

Account data and analysis history are kept as long as you have an account. To close your account and have the data deleted, e-mail info@bluestreamfl.com.

Who receives your data

These companies process data for us. Several are in the USA; transfers rest on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU standard contractual clauses. LinkedIn and Meta also use the data for their own purposes.

Cookies and similar storage

What this site can store in your browser, who sets it, and whether it needs your consent. Stripe's checkout page and LinkedIn's and Meta's own sites set further cookies on their own domains, covered by their policies.

Your rights

Under the GDPR you can ask for access to the data we hold about you, have it corrected or deleted, restrict or object to processing, and receive a copy in a portable format. Where processing rests on consent you can withdraw it at any time; for the ad tags, use Cookie settings in the footer. Write to info@bluestreamfl.com.

If you are not satisfied with how we handle your data, you can complain to Datatilsynet, the Norwegian Data Protection Authority, or to the supervisory authority where you live.

Changes to this page

We update this page when the site changes. The date at the top says when it was last revised.