Subscribe

Legal

Privacy policy

Effective 15 October 2026

ShipSafe is a reading site. It collects very little: your email address if you subscribe, and the details needed to invoice you if you buy a sponsor slot. We don't sell or share personal data, and there are no advertising trackers.

1. Who we are

The data controller is MIKANAO 1519 ENK, Oslo, Norway. For anything about your data, write to hello@themikanaohub.com.

2. The short version

3. What we never collect

ShipSafe has no scanner and no form for websites, repositories, code, API keys or other credentials. We never ask for them, and we don't access or store your apps or data. If you email us something sensitive by mistake, we delete it.

4. Newsletter (The Honest Build)

What: the email address you enter in a signup form. Why: to send you the newsletter, and nothing else. Legal basis: your consent (GDPR art. 6(1)(a)). Who: the subscriber list is held by our email provider Resend, acting as our processor. How long: until you unsubscribe or ask us to delete it. Every email has an unsubscribe link, and you can withdraw consent at any time. Withdrawing consent doesn't affect anything sent before.

5. Sponsor payments

Sponsor slots are paid through Stripe Payment Links. Stripe collects and processes your card details. We never see or store full card numbers. Stripe acts as an independent controller for some of this processing, for example fraud prevention and its own legal obligations (see Stripe's privacy policy). From Stripe we receive your name, email, billing address, company name and tax/VAT ID if you provide one, and payment details such as amount, date and payment ID. We also keep the sponsor copy, link and logo you send us.

Why: to review and run your placement, issue invoices and refunds, and keep accounts. Legal basis: performance of a contract (art. 6(1)(b)) and our legal obligations (art. 6(1)(c)). How long: accounting records are kept for five years after the end of the financial year, as the Norwegian Bookkeeping Act (bokføringsloven § 13) requires. Sponsor copy no longer needed is deleted after the campaign ends.

6. Hosting and server logs

The site is hosted by Vercel. To deliver pages and protect the site against abuse, Vercel processes technical data such as IP address, user agent, the page requested and the time. Legal basis: our legitimate interest in running a secure website (art. 6(1)(f)). Logs are kept for a short period under Vercel's retention settings. We don't use them to profile visitors.

7. Cookies and your browser

We set no tracking or advertising cookies, and the site loads no analytics or advertising scripts. Two preferences are stored only in your own browser's local storage and are never sent to us: your light or dark theme choice, and stories you mark with "I hit this too · Save". Clear your browser's site data to remove them. Links to sources, Stripe checkout pages and other sites follow those sites' own policies.

8. Who handles the data

We don't sell personal data or give it to anyone else, except where the law requires it.

9. Transfers outside the EEA

Resend, Stripe and Vercel are US-based and may process data in the United States. Where they do, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified, and/or by the European Commission's Standard Contractual Clauses in their data processing terms.

10. Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Some data, such as accounting records, must be kept by law even if you ask for deletion. Write to hello@themikanaohub.com. We reply within one month.

11. Complaints

If you think we've handled your data wrongly, please tell us first so we can fix it. You also have the right to complain to Datatilsynet, the Norwegian Data Protection Authority, or the authority where you live.

12. Children

ShipSafe is meant for adults building software. It isn't directed at children under 16, and we don't knowingly collect their data. If you think a child has subscribed, contact us and we'll delete it.

13. Changes to this policy

If what we collect changes, this page changes with it and the effective date above is updated. For significant changes we'll also tell newsletter subscribers. Also see our terms of use.