Privacy Policy
Last updated: 21 March 2026
1. Data Controller
Phantix AS (org. 811 696 072), based in Oslo, Norway, operates Phantix and is the data controller for personal data collected through this website and its products. Contact: hello@phantix.com
2. What Data We Collect
We collect only what is necessary to provide our services:
- Email address — when you sign up for our newsletter or use a contact form.
- Usage data — anonymised analytics about how you interact with our sites (pages visited, time on page, referrer). We use PostHog for this.
- Cookie preferences — stored locally in your browser.
3. Cookies
We use the following cookies:
| Name | Purpose | Duration |
|---|---|---|
| phantix-cookie-consent | Stores your cookie consent choice | 1 year (localStorage) |
| ph_* | PostHog analytics (anonymised) | 1 year |
You can withdraw consent at any time by clearing your browser storage or clicking "Decline" in the cookie banner.
4. How We Use Your Data
- To send you newsletters and product updates (email — only with your consent).
- To understand how our site is used and improve it (analytics).
- To respond to enquiries sent via our contact form.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Legal Basis (GDPR)
- Consent (Art. 6(1)(a)) — for newsletter subscriptions and analytics cookies.
- Legitimate interest (Art. 6(1)(f)) — for basic server logs and security monitoring.
6. Data Retention
Email addresses are retained until you unsubscribe or request deletion. Anonymised analytics data is retained for up to 12 months. Server logs are retained for up to 90 days.
7. Third-Party Services
- PostHog — analytics. Data may be processed in the EU. See PostHog Privacy Policy.
- Cloudflare — hosting and CDN. See Cloudflare Privacy Policy.
8. Your Rights Under GDPR
You have the right to:
- Access (Art. 15) — request a copy of your personal data.
- Rectification (Art. 16) — correct inaccurate data.
- Erasure (Art. 17) — request deletion of your data ("right to be forgotten").
- Restriction (Art. 18) — limit how we process your data.
- Portability (Art. 20) — receive your data in a machine-readable format.
- Object (Art. 21) — object to processing based on legitimate interest.
- Withdraw consent (Art. 7(3)) — at any time, without affecting prior processing.
To exercise any of these rights, email hello@phantix.com. We will respond within 30 days.
9. Complaints
If you believe we are handling your data unlawfully, you have the right to lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority): www.datatilsynet.no
10. Changes to This Policy
We may update this policy from time to time. Material changes will be announced via our newsletter or prominently on this page. Continued use of our services after changes constitutes acceptance.
11. Contact
Phantix AS
Oslo, Norway
hello@phantix.com
