Legal

Privacy Policy

Last updated: August 2026

This page explains what personal data Madsaa collects when you visit this site, sign up for updates, take one of the tools in The Discovery Hub, or reach out directly, and what rights you have over that data. It's written in plain language on purpose. If anything here is unclear, write to us at the address at the bottom of this page.

01Who This Applies To

This policy covers madsaa.com and any tools hosted on it (including The Discovery Hub quizzes, the 5-Day Challenge, and The Manifesto download). Madsaa is based in Norway and operates in accordance with the EU General Data Protection Regulation (GDPR), which applies through the European Economic Area.

02What We Collect

We only collect what we actually need to run the site and respond to you. Here's the full list:

Data	When	Why
Email address	Newsletter sign-up, quiz results, challenge sign-up	To send the content you asked for, and occasional updates
Name	Contact form, membership sign-up	To address you personally and process your request
Birth date	Optional, inside The Discovery Hub tools only	Used only to personalize that one result. Never stored against your email or used elsewhere
Message content	Contact form submissions	To read and respond to what you wrote
Technical data (IP, browser, device)	Automatically, on any visit	Basic security and site performance, never used to identify you personally

03Legal Basis

We process your data under one of two grounds:

Consent — for the newsletter, quiz results, and any marketing email. You can withdraw this at any time by unsubscribing, no explanation needed.
Legitimate interest — for basic technical data needed to keep the site working securely.

We never sell your data, and we never share it with anyone for their own marketing purposes.

04Who Else Sees It

We use a small number of outside services to actually run the site. Each one only sees what it needs to do its job:

Brevo (email delivery) — stores your email and name to send newsletters and automated sequences. Brevo is headquartered in Paris and stores data within the EU.
Our hosting provider — stores the site's technical logs. We choose EU-based hosting wherever possible.

If a tool we use is ever based outside the EU, we only use providers operating under the EU-US Data Privacy Framework or an equivalent safeguard, and we review this regularly, since the legal landscape around EU-US data transfers continues to evolve.

05How Long We Keep It

Newsletter and quiz data — kept until you unsubscribe or request deletion.
Contact form messages — kept for up to 12 months, to allow for follow-up conversations.
Technical logs — kept for up to 90 days, then automatically deleted.

06Your Rights

Under GDPR, you have the right to:

Access — ask what data we hold about you.
Correct — ask us to fix anything inaccurate.
Delete — ask us to erase your data entirely.
Export — get a copy of your data in a portable format.
Object — stop us from processing your data for marketing at any time.

To use any of these, just email us, we'll respond within 30 days.

07Cookies

This site currently uses only essential cookies needed for basic functionality. If we ever add analytics or tracking cookies, this page will be updated first, and you'll be asked for consent before anything is set.

08Changes to This Policy

If this policy changes in a meaningful way, we'll update the date at the top of this page. Significant changes will also be flagged in the newsletter, if you're subscribed.

Questions?

Reach out any time.
contact@madsaa.com
@madsaa.official