DRAFT — awaiting approval. This text is not yet in force. / UDKAST — afventer godkendelse.
Privacy & cookies
Last updated: 16 October 2026. Data controller: VEXTR AB. The legal entity responsible for this service is VEXTR AB — company and contact details: vextr.co.
What we collect
- Account data: e-mail address, password (stored hashed by our auth provider) or Google sign-in identity, and the name you choose to be called.
- What you add to Solène: your will drafts, vault documents and notes, digital account inventory, trusted people, first-days file (who to call, ceremony wishes, cost and papers pointers, gather arrangements), organ donor preferences, memorial wishes, wellness check-ins and readiness answers.
- Readiness quiz: your answers, which can be saved before you create an account.
- Technical data: standard server logs (IP address, browser, time) kept by our hosting providers for security and operations.
- First-party traffic logs: page path, coarse device class, country (when provided by the network), referrer host and UTM campaign tags when present. Used only for staff product/ops metrics. We do not store raw IP in these logs (visitor counts use a daily one-way hash). Visible only to Solène staff.
We do not use advertising or third-party analytics trackers, and we do not sell your data.
Why we use it (legal basis)
To provide the service you asked for (contract, GDPR art. 6(1)(b)), to keep it secure (legitimate interest, art. 6(1)(f)), and where you tell us about health matters such as organ donation, on the basis of your explicit consent (art. 9(2)(a)).
Who processes it
- Supabase (database, authentication and file storage) — region: EU (Ireland, eu-west-1).
- Cloudflare (hosting and network delivery).
- Resend (sending account e-mails such as verification and password reset).
- Google (only if you choose to sign in with Google). Fonts are served from our own domain.
Cookies and local storage
We only use what is strictly necessary, so no consent banner is required:
sb-…cookies — keep you signed in (Supabase session).solene-preview— remembers access to the early preview.- Browser local storage — your in-progress quiz answers and preferred first name, on your device only.
How long we keep it
As long as your account exists. When you delete your account, your data is deleted within 30 days, except where the law requires us to keep it.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, via the contact details for VEXTR AB at vextr.co. You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Privatliv & cookies (dansk)
Dataansvarlig: VEXTR AB. Den juridiske enhed bag tjenesten er VEXTR AB — selskabs- og kontaktoplysninger: vextr.co.
Hvad vi indsamler: kontooplysninger (e-mail, krypteret adgangskode eller Google-login, dit foretrukne navn), det du selv lægger i Solène (testamente-udkast, dokumenter, digitale konti, betroede personer, ønsker til ceremoni og mindested, organdonation, trivsels-check-ins), dine quiz-svar, tekniske serverlogs (IP, browser, tidspunkt hos hostingen) samt first-party trafiklogs (side, enhedstype, land, referrer-host, UTM — uden rå IP; kun til staff-statistik). Ingen reklame- eller tredjeparts-analysesporing, og vi sælger ikke dine data.
Formål og grundlag: levering af tjenesten (GDPR art. 6(1)(b)), sikkerhed (art. 6(1)(f)) og helbredsoplysninger som organdonation kun med dit udtrykkelige samtykke (art. 9(2)(a)).
Databehandlere: Supabase (database, login, filer), Cloudflare (hosting), Resend (konto-e-mails), Google (kun ved valgfrit Google-login). Skrifttyper leveres fra vores eget domæne. Supabase-data ligger i EU (Irland).
Cookies: kun nødvendige — Supabase-session (sb-…), solene-preview og local storage til quiz-svar og fornavn. Derfor intet samtykkebanner.
Opbevaring og rettigheder: så længe du har en konto; slettes inden 30 dage efter sletning af kontoen. Du har ret til indsigt, berigtigelse, sletning, begrænsning, dataportabilitet og indsigelse — kontakt VEXTR AB via vextr.co. Klage kan indgives til Datatilsynet.