PRIVACY · 23 OCTOBER 2026

Website and VibeLoop privacy

oohaa.dev is the personal and project support website of Ola Oldernes Hårstad. For questions about your information, email oohaarstad@gmail.com.

Visiting the website

This site does not run advertising, visitor analytics, or tracking cookies. Hosting services process connection information, including IP addresses and technical request details, to deliver and secure the website. The production site is designed for Vercel hosting.

Reading preference

The Perspective selector stores your choice of Personal, Tech, Business, or Design in this browser’s local storage. It changes the project descriptions shown to you. The choice is not sent to the server or used for analytics. You can change it in the navigation or remove it by clearing this site’s browser data.

VibeLoop private hosted app

The hosted VibeLoop app is private, initially for the owner only. Later access requires a personal invitation. Vipps sign-in uses the shared Mantinomia account service. That service stores the sign-in identifier, account identifier, product access grants, and session records. VibeLoop checks the current grant on each protected request. Essential sign-in and session cookies keep you signed in; they are not advertising cookies.

GitHub is a repository connection, separate from sign-in. VibeLoop stores your shared account identifier, connected GitHub identifier and profile, and encrypted GitHub credentials. It reads repository information and source through that connection. Saved application data includes repository metadata and source snapshots, courses, your library, learning progress, saved notes, and marks recording what you have seen or understood.

Vercel hosts the app and processes connection and security information. The existing Supabase service stores VibeLoop data in an isolated private application area with separate database access. Account and session timestamps support access checks and security. The hosted app has no advertising, visitor analytics, or detailed behavioural tracking.

Hosted AI generation is currently disabled. The hosted app does not send repository source to model providers to create new courses or notes. Existing courses, source snapshots and saved notes remain readable; progress and reading marks can still be saved.

The owner’s existing local library and GitHub connection were copied once to the hosted app. Credentials were encrypted again with a separate cloud key. Local and hosted stores do not continuously sync. Stored data is retained to provide the private app until removed. Removing local data does not remove the hosted copy, and revoking access does not erase stored content. Contact the owner to request removal of hosted records and retained repository snapshots. Submitted feedback is handled separately as described below.

Sending feedback

When you submit feedback, the site stores your project, category, title, message, the date, and your email address if you choose to provide one. App integrations can also send the app version, build, operating-system version, device model, language, and screen name. Send only information needed to explain your feedback. Please do not include private app contents or sensitive personal information.

Feedback is delivered to the project’s private mempit pipeline, accessible only to the provisioned owner account. A separate private delivery copy retains the original and lets interrupted deliveries retry. It is used to investigate problems, improve projects, and respond when requested. Messages are kept while useful for that purpose and deleted when no longer needed. You may request deletion by email, quoting the submission reference or enough information to locate your message.

Sketchy’s native Settings feedback form sends only the title/message you enter and app version/build. It attaches no drawings, references, sketchbook entries, connection addresses or interpreter credentials, and makes no AI call. Its draft stays on the device until sent. You can request removal of both stored feedback copies by email; deleting Sketchy or its local sketchbook does not remove a submitted message.

Website security and the owner login

The owner login sets an essential, HttpOnly session cookie that expires after eight hours. It is not used to track visitors. To limit abuse, the service temporarily stores a one-way keyed fingerprint of a request’s IP address and a request count. It does not store the raw IP address in the feedback record after confirmed delivery. A keyed fingerprint is retained with a pending submission until it is delivered. Website rate counters expire after fifteen minutes; the receiving service uses one-hour counters. Expired counters are removed by later requests. Hosting providers may retain their own security logs under their policies.

Hosting, correspondence, and service providers

Vercel delivers the website. Supabase stores submission and delivery records in a separate private intake area and stores feedback in the shared mempit service for private review. The former Neon database is stopped and retained temporarily for migration recovery. Email correspondence is handled through Gmail (Google). These providers may process data outside Norway and the EEA under their applicable contractual and transfer arrangements. We do not sell feedback or use it for advertising.

Your choices and rights

You can leave your email blank, choose what to include in a message, or contact the owner directly. Processing is based on the legitimate interests of operating a secure website, responding to requests, and improving the projects. Where applicable, you can ask to access, correct, erase, restrict, or object to the processing of your personal information. You can also raise a concern with Datatilsynet, Norway’s data-protection authority.

Feedback and app data are separate

Submitting feedback does not give this site access to information stored inside your apps. VibeLoop’s hosted app data is described above. Feedback is independent of an app account: deleting that account does not retract a message sent to the developer. Read the separate policies for mempit and dagstack.