Privacy Policy
Last updated 8 September 2026
This policy explains how SkillHack, operated by ARS Capital AS, collects and uses your personal data, and the rights you have. We collect as little as possible. We measure how the site is used with a cookieless tool that stores no identifier and no personal data, and we use no tracking or advertising cookies.
1. What we collect
When you request or buy a seat: your name, e-mail address and phone number, and the messages you send us.
When you subscribe to our newsletter: your e-mail address, the language you signed up in, the time of sign-up and your consent.
When you pay: your payment is processed by Vipps MobilePay or, for card payments, by Stripe. We receive confirmation that a payment succeeded and the related order details; we do not receive or store your full card number.
If you earn a certificate: your name and the cohort, which appear on the certificate and its verification page.
We measure page views with Vercel Analytics and Vercel Speed Insights. Neither sets a cookie, and neither stores an identifier that could single you out. We run no tracking or advertising cookies.
2. Why we use it, and our legal basis
- To deliver the course you bought and manage your seat — to perform our contract with you (GDPR art. 6(1)(b)).
- To reply to enquiries and send course-related e-mails such as onboarding information and receipts — our legitimate interest (art. 6(1)(f)) and performance of the contract.
- To send the newsletter — news about SkillHack and future cohorts — your consent (art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link in every e-mail or by writing to us.
- To issue and verify certificates — performance of the contract.
- To meet accounting and tax obligations — a legal obligation (art. 6(1)(c)).
3. Who we share it with
We use a small number of processors that handle data on our behalf:
- Vipps MobilePay — payment processing.
- Stripe — card payment processing.
- Vercel — website hosting.
- Upstash — database for orders and the newsletter list.
- Resend — sending our e-mails and holding the newsletter list. Resend is based in the USA; transfers are covered by the EU standard contractual clauses.
We do not sell your data. We share it with authorities only where the law requires.
4. How long we keep it
We keep enquiry and enrolment data for as long as needed to run the cohort and our relationship with you, and accounting records for the period required by Norwegian bookkeeping law (normally five years). Certificate data is kept so that issued certificates stay verifiable. Newsletter addresses are kept until you unsubscribe, after which they are deleted.
5. Your rights
You have the right to access, correct, delete, restrict and port your personal data, and to object to certain uses. To exercise any of these, e-mail upgrade@skillhack.no.
If you believe we handle your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).
6. Cookies
We set no cookies of our own. Our measurement is cookieless, and we use no advertising or third-party tracking cookies. If you arrive through a campaign link, the campaign tags in that link are kept for the length of your visit in your browser's session storage and sent with your order, so we know which link produced a booking. If you arrived on an advertisement on Facebook or Instagram and then bought a seat, we tell Meta that the purchase happened, from our server, identified by your e-mail address and phone number hashed with SHA-256 so that Meta receives no readable contact details. This is how we measure whether an advertisement paid for itself. We do this only for purchases that began on one of our advertisements; write to upgrade@skillhack.no if you would rather we did not. Payment pages shown by Vipps MobilePay are covered by Vipps' own privacy policy.
7. Changes and contact
We may update this policy; the date above shows the latest version. For any privacy question, contact ARS Capital AS at upgrade@skillhack.no.