Privacy and cookies
Last updated September 25, 2026
Horizon uses no advertising or tracking cookies, and stores nothing in your browser that needs your consent. That is why there is no cookie banner. This page explains what we store, what we process, and your rights.
Who we are
Horizon is made by Horizon Software AS. Send questions about privacy, and requests about your data, to support@horizonsoftware.no.
Who is responsible
Your organisation decides what production, planning and business data goes into Horizon, and is responsible for it. We process that data on its behalf, under a data processing agreement.
Horizon Software AS is responsible for your user account, for keeping Horizon secure and working, and for the usage data we use to improve Horizon.
What we process
- Your account: name, email address, role, the organisations you can access, and your settings, such as language and theme.
- Technical data: IP address, browser, the pages you open, errors, performance measurements and timestamps.
- Support: the messages you send us. If a conversation needs follow-up, it becomes a support ticket that holds your name, email address and the conversation. If you accept a screen-sharing request, our support staff see your screen live. What you type stays hidden unless you choose to show it, and nothing is recorded.
- Your organisation's data: the production, planning and financial data your organisation puts into Horizon.
Why, and on what legal basis
- To provide Horizon to your organisation, sign you in, and give you the access your organisation grants. Basis: our and your organisation's legitimate interest in providing the service (GDPR Art. 6(1)(f)).
- To keep Horizon secure, find and fix faults, and help you when you contact us. Basis: our legitimate interest in a secure, working service (Art. 6(1)(f)).
- To improve Horizon, using usage data that we look at in aggregate. Basis: our legitimate interest in making Horizon better (Art. 6(1)(f)). You can object to this.
- To meet legal obligations, where the law requires it (Art. 6(1)(c)).
Cookies and browser storage
Everything below either keeps Horizon working or remembers a choice you made. None of it tracks you, and none of it is shared with anyone else.
| Name | What it does | How long |
|---|---|---|
__Secure-better-auth.session_token | Keeps you signed in. | Up to 7 days after you last used Horizon |
__Secure-better-auth.state, __Secure-better-auth.relay_state | Protects single sign-on (OIDC or SAML) while you sign in. | 5 minutes |
horizon_locale | Remembers the language you chose. | 1 year |
horizon_context | Remembers the organisation you last chose. | 1 year, or until you log out |
org_last_context | Remembers the organisation you last opened in the Organisation app. | 180 days, or until you log out |
| Name | What it does | How long |
|---|---|---|
theme | Remembers light or dark mode. | Until you clear it |
horizon.sidebarCollapsed | Remembers whether the side menu is collapsed. | Until you clear it |
visibleSpecies | Remembers which species you show. | Until you log out or clear it |
horizon.plan.recent | Lists the plans you opened recently. | Until you log out or clear it |
plan:*-dismissed:* | Remembers the notices you closed in a plan. | Until you log out or clear it |
Maps and error monitoring store nothing in your browser.
Horizon support staff who turn on notifications also get a service worker, which receives them.
Who else receives data
- Our hosting provider runs Horizon, including its backups, in data centres in the EU.
- Error monitoring runs on our own servers and is not shared.
- Mapbox, Inc. provides the map tiles. When you view a map, your browser fetches them from Mapbox, which receives your IP address and the area shown. Mapbox is in the USA, so this is a transfer outside the EEA, covered by Mapbox's data processing addendum.
- GitHub, Inc. holds our support tickets. When a support conversation becomes a ticket, your name, email address and the conversation are stored with GitHub, in the USA. This transfer outside the EEA is covered by GitHub’s data protection agreement.
- Mailgun Technologies, Inc., a US company, sends Horizon’s emails, such as password resets, from its EU region, and receives your email address to do so. This, including any transfer outside the EEA, is covered by Mailgun’s data processing agreement.
We do not sell data, and we do not share it for advertising.
How long we keep it
We keep your account while your organisation gives you access to Horizon. We keep technical data only as long as we need it to run and secure the service, then delete it. Your organisation's data is kept and deleted as agreed with your organisation.
Your rights
You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to how we use it, and get a copy. Write to support@horizonsoftware.no. For your organisation's data, we pass your request on to your organisation, which decides.
You can also complain to the data protection authority where you live. In Norway, that is Datatilsynet.
Changes
When we change how we handle data, we update this page and the date at the top.