Privacy notice
Last updated 4 October 2026
This notice explains what information Frontreel collects, why we collect it, and what you can ask us to do with it. Frontreel is a sole proprietorship registered in Norway. We're responsible for your information under the EU General Data Protection Regulation (GDPR), which applies in Norway. To reach us about anything on this page, email jan@frontreel.com.
When you request a free sample
We save your website, email address, optional business name and the time of your request so we can review it and reply about your sample. Your request is not a newsletter signup or subscription. You can ask us to delete it by emailing us.
We send you a confirmation and notify our team by email. Cloudflare Turnstile checks for automated submissions. To limit repeated requests, we temporarily store a keyed hash of your IP address, not the address itself; expired counters are cleared by our scheduled cleanup.
When you use our free tools
The video ad checker reads the public pages and photos of the website you enter. We save that web address, the business name on the site and what the checker found, so a repeat check within a week is instant and we can see which businesses use it. We don’t ask for your name or email. Cloudflare Turnstile and a keyed hash of your IP address limit repeated checks, as for sample requests. You can ask us to delete a check by emailing us.
The food photo checker and the food marketing calendar run in your browser. Your photo is not uploaded, and your calendar choices are not saved.
If we made you a sample ad
We find local businesses whose websites have good material for a video ad. From your public website we use your business name, city, web address, the business email address listed there, and the photos and text on the site. We use them to make a sample ad and to email you about it once.
We rely on our legitimate interest in offering our service to businesses (GDPR article 6(1)(f)). If you reply "no thanks" or ask us to delete your information, we'll stop contacting you and delete it, keeping only your email address on a do-not-contact list so we don't write to you again. If you don't become a customer, we delete your sample and your details within 12 months of our last email.
When you open your sample page
Your sample ad is on an unlisted page with instructions for search engines not to index it. When the page is opened, we record that it was viewed, whether the video was played and how much of it, and whether the buttons were clicked. With each of these we store the approximate country and city the visit came from, as estimated by our hosting provider, and the browser's description of itself (the "user agent"). Sample-view tracking does not store your IP address or set tracking cookies. Signed-in account access uses the essential cookies described below.
We use this to see whether a sample was useful and when to follow up.
If you're a customer
We keep your name, business name and email address, the photos and material you send us, our emails with you, and the ads we make for you. Payments are handled by Stripe. We see who paid and when, but never your full card number.
We need this to provide the service you've signed up for (GDPR article 6(1)(b)). We keep accounting records for as long as Norwegian bookkeeping law requires, which is currently five years. Everything else is deleted within 12 months after you cancel, unless you ask us to delete it sooner.
Analytics and cookie choices
If you choose “Allow analytics”, Google Tag Manager loads Google Analytics on our public marketing pages. It measures visits, scrolling, outbound links, demo-video engagement, sample requests and purchases. We keep the first campaign source recorded after you consent and connect it to your request and subscription. Stripe-confirmed payments are sent from our server to Google Analytics with an invoice reference, amount, currency and browser identifier. We use this to understand which campaigns bring paying customers. Analytics is optional and based on your consent. Declining does not affect your sample request or account.
We do not load Google Analytics before you consent, or on sign-in, admin, sample, account, brief, review or delivery pages. We do not send your email, business details, form contents or private page addresses to Google Analytics. Public page addresses are sent without query strings; recognised campaign labels may be sent separately. Google receives technical information such as your browser, device and network connection when analytics is enabled.
Our analytics cookies expire after up to six months. We remember your choice in this browser for six months. You can change it using “Cookie settings” in the footer; withdrawing consent removes analytics cookies and stops further collection, including future payment events associated with this browser. Campaign labels already attached to business records remain in our internal reports. Google Analytics event-level data is retained for two months. Advertising cookies, Google Signals and advertising personalisation are not enabled by this setup.
Services we use
We share information only with the services that help us run Frontreel:
- Cloudflare hosts this website, the sample pages, the videos, uploaded briefs and photos, and our database. It also sends our automated service emails.
- Google Workspace runs our email. With your consent, Google Tag Manager and Google Analytics provide public-site analytics.
- Stripe processes payments.
- Higgsfield runs the AI video models. We send it the photos and descriptions used to make each ad, but not your contact details.
- Fonts are served by Frontreel through Cloudflare. Visiting the site does not make a Google Fonts request.
Some of these companies are based in the US or process data there. Where that happens, the transfer relies on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
We don't sell your information and we don't use it for advertising.
Your rights
You can ask us for a copy of the information we hold about you, and ask us to correct it, delete it or stop using it. You can always object to being contacted about our service, and we'll stop. Email jan@frontreel.com and we'll reply within 30 days.
If you're unhappy with how we've handled your information, you can complain to Datatilsynet, the Norwegian Data Protection Authority, at datatilsynet.no, or to the data protection authority where you live.
Changes
If we change this notice, we'll update the date at the top. If a change affects customers, we'll email them first.
Your business account
We use your email to send one-time sign-in codes and connect you to your business records. Essential session cookies keep you signed in for up to 30 days. We store your business profile, your confirmation of its details, and security records such as sign-in IP addresses and browser information. We do not send private account pages, briefs or files to advertising analytics.
Account pages and customer files require sign-in with an authorised account. An unlisted sample can be viewed by anyone with its link, including someone it is forwarded to. Downloading a sample requires a verified email address, which we record with the download. Contact us to replace or revoke a sample link, or to request correction, transfer or deletion of your account information.