Privacy

Draft — not in force until it has been reviewed. This is a translation of the Icelandic text, which is the binding version.

Last updated: 16 October 2026

This policy sets out what personal data arise when you use tourism.augursignals.is, what they are used for and what rights you have. It is based on the Icelandic Act No. 90/2018 on Data Protection and the Processing of Personal Data and the General Data Protection Regulation (EU) 2016/679.

Controller

Viðar Ingason, who runs the website as an individual ("we"). Questions and requests: augur@augursignals.is.

What we record and why

  • Email address. When you sign in we store your email address to identify you and send you sign-in codes. If you sign in with Google, we receive your email address, name and the address of your profile picture from Google, but nothing else from your Google account. We also use it to let you know of significant changes to the service, e.g. changed terms or the start of charging.
  • Pages viewed by signed-in users. When you are signed in we record which pages you open and when, to see what is used and to improve the service. This is based on our legitimate interest in developing the service, and you can object to it at any time. The information is not shared with anyone and is not used for advertising.
  • Usage statistics. We use PostHog to see how the website is used, e.g. which pages are viewed, which series, markets and regions are selected and when data are downloaded to Excel. Without consent, PostHog does this without cookies and without storing anything in your browser, and the usage is not linked to you. This is based on our legitimate interest in developing the service.
  • If you accept cookies, the following is added:
    • Google Analytics shows overall use of the website, e.g. which pages are viewed and from what kinds of devices. It recognises your browser between visits with a cookie but receives neither your email address nor your name. Without consent, Google Analytics is not loaded.
    • PostHog recognises your browser between visits with a cookie and records how the pages are used (page views, clicks and scrolling) so we can see where users run into trouble. Input fields, e.g. email, are hidden in the recordings. If you are signed in, the usage is linked to your user ID, but not to your email address or name.
  • Technical logs. The website's hosting providers temporarily log IP addresses and technical information for security and operations.

We do not send marketing email unless you have specifically agreed to it, and we do not sell personal data.

Cookies

  • A sign-in cookie keeps you signed in. It is necessary and does not require consent.
  • Your cookie choice is stored in the browser so you need not be asked again.
  • Google Analytics (_ga, _ga_*) and PostHog (ph_*) cookies are stored only if you accept. Consent can be withdrawn by deleting the website's cookies in your browser.

Service providers

  • Supabase — sign-in and storage of email addresses and page views. Data hosted within the EU (Ireland).
  • Resend — sending sign-in emails, from a data centre within the EU (Ireland).
  • Vercel — hosting of the website.
  • Google — sign-in with a Google account, if you choose it, and Google Analytics, only with consent.
  • PostHog — usage statistics, and session recordings only with consent. Data hosted in the United States.

When data leave the European Economic Area, the transfer rests on a valid legal basis, such as the EU–US Data Privacy Framework or standard contractual clauses.

How long

  • Email addresses and page views are kept while the account is active and deleted within 30 days of a request for deletion.
  • Google Analytics keeps data for 14 months.
  • PostHog keeps events for up to one year and recordings for 30 days.

Your rights

You can see the information we hold about you, have it corrected or deleted, and object to the recording of page views. Send a request to augur@augursignals.is and we will reply within a month. If you believe the processing does not comply with the law, you can complain to the Icelandic Data Protection Authority, Persónuvernd (www.personuvernd.is).

Changes

We will notify registered users of significant changes to this policy by email before they take effect.