Norgbass App Privacy Policy

Last updated: 18 August 2026

This policy explains what information the Norgbass mobile app (“the App”) collects, why, and how you can control or delete it. Norgbass is an event and ticketing companion app for Norgæther Summer Festival and related Norgbass events.

This page applies specifically to the Norgbass mobile app, and is the policy referenced in the App and in its app store listings. It’s separate from the general privacy statements published on norgbass.com for the website itself.

If anything here is unclear, contact us at support@norgbass.com.

1. Information we collect

We collect only what’s needed to run your account, your festival tickets, and optional notifications. We do not collect your precise location, contacts, photos, or camera access — the App does not request any of these.

Account information, if you create an account:

  • Email address
  • Password (stored securely by our authentication provider; we never see or store it in plain text)
  • Display name, if you choose to set one
  • Language preference (English or Norwegian)

Ticket and device information:

  • A random identifier generated on your device when you first activate a ticket, used only to recognize that device on future visits (this is not your device’s IMEI, Android ID, or advertising ID — it’s a value we generate ourselves and store only on your device and in our systems)
  • Your ticket code, once activated, so we can show your QR code and verify entitlement to event details
  • A short-lived access token issued after activation, used to confirm your ticket is still valid

Push notification information, only if you turn notifications on:

  • A device token issued by Google’s Firebase Cloud Messaging service, used to deliver notifications to your device
  • Your notification preferences (on/off, and any quiet-hours window you set)

Favorites: which public events you’ve marked as favorites, if you use that feature.

Optional website account link: if you choose to link your Norgbass website account, we store a verified connection between your app account and your website account.

2. How we use this information

  • To create and manage your account
  • To activate and display your festival ticket, and to reveal arrival/venue details once your ticket is confirmed and reveal conditions are met
  • To send you push notifications you’ve opted into, and respect any quiet hours you’ve set
  • To remember your favorited events and language preference
  • To keep your account secure — for example, we limit how many times a ticket code can be attempted from one device in a short period, to reduce abuse

We do not sell your information, and we do not use it for advertising or third-party marketing.

3. Who we share information with

We use the following service providers to run the App. Each only receives the minimum information needed to perform its function:

  • Supabase — hosts our database, handles account authentication, and runs the backend logic for ticket activation and account management.
  • Google Firebase Cloud Messaging — delivers push notifications, if you’ve enabled them. Firebase only receives a device token, not your email or ticket information.
  • Our WordPress site (norgbass.com) — publishes public event and schedule information that the App displays. If you link your website account, a verified connection is stored so your app account and website account can be matched.

We do not share your data with advertisers or data brokers. We only disclose information if required by law.

4. Data security

  • Your ticket code and device credentials are stored on your device using its built-in secure storage (Android Keystore or iOS Keychain) — not in plain, unencrypted files.
  • All communication between the App and our servers uses HTTPS encryption.
  • Your festival’s private arrival/venue details are only released after your ticket is verified server-side; they are never publicly accessible.

5. Your choices and rights

  • Notifications: you can turn push notifications on or off at any time in the App’s account settings.
  • Account deletion: you can permanently delete your account directly in the App, under Account → Danger Zone. This immediately and permanently deletes your account and all associated profile, favorites, and notification data from our systems. This action cannot be undone.
  • Access or questions: email support@norgbass.com if you’d like a copy of the information we hold about you, or have any other question about your data.

6. Data retention

We keep your account information for as long as your account exists. If you delete your account, associated data is permanently removed. Anonymous or aggregated data (such as rate-limiting records tied to a device, not a person) may be retained briefly for security purposes even after account deletion.

7. Children’s privacy

Norgbass is a festival and nightlife-oriented app and is not directed at children. We do not knowingly collect information from children.

8. Changes to this policy

If we make material changes to this policy, we’ll update the “Last updated” date above. Continued use of the App after changes means you accept the updated policy.

9. Contact us

Norgbass
Email: support@norgbass.com
Web: https://norgbass.com