Privacy policy

Last updated: 8 November 2026

This page describes which personal data ABU-TROLLING ADVENTURES processes, why, how long it is kept and what rights you have.

1. Data controller

Membership: Email address, password (encrypted) or Google sign-in, membership status and an internal user ID. With Google sign-in we receive your name, email address and profile picture. For signed-in members, the pages you visit are logged against the internal user ID (without name or email) to prevent account misuse.
Payments: Name, email address, phone number (guiding), recipient name and greeting (gift cards) and the payment provider's reference. Card details are handled entirely by Stripe/Klarna and never stored by us.
Contact: Knowledge bank contact form: name, email address and message. Guiding contact and booking forms: name, email address, phone number, preferred date, lake and requests.
Guestbook: Name/signature, town/country and message. Entries are published only after review. You can ask for your entry to be removed at any time by emailing mikael@abu-trolling.se.
Visitor statistics: Page, time, device type, referring web address, country code and search term. No IP address is stored and no persistent ID is stored in your browser.

Visitor and purchase statistics: 13 months.
Members' page visits: 12 months, or deleted immediately when the account is closed.
Handled messages and guiding enquiries: 2 years.
Unapproved guestbook entries: 6 months.
Accounting records: 7 years under the Swedish Bookkeeping Act (bookings, gift cards, payments and receipts).
When you close your account: The membership and subscription are cancelled, and the account and your visit history are deleted. Receipts are kept for accounting.

Lovable Cloud (Stockholm, EU): Database and sign-in.
Cloudflare: Hosting, security and delivery of the website.
Stripe and Klarna: Payments.
Google: Sign-in with a Google account (name, email address, profile picture).
Lovable Email: Sending confirmations, receipts and gift cards.
OpenAI via Lovable AI Gateway (USA): AI translation and archive search. This means data is transferred outside the EU. The transfer takes place under Lovable's and OpenAI's data processor terms.
Copies of bookings and messages are also sent by email to mikael@abu-trolling.se.
We never sell personal data and use no ad networks or tracking pixels.

We use no cookies for marketing or tracking. The following is stored in your browser:
abu_lang / abu_guidning_lang (localStorage): your chosen language.
abu_lang_suggest_closed (localStorage): that you have closed the language suggestion box.
sb-*-auth-token (localStorage): keeps you signed in.
catalog_text_query (sessionStorage): your latest catalogue search term; deleted when the tab is closed.
Stripe: necessary security cookies during payment.
The visitor counter stores no ID in your browser.

You have the right of access, rectification, erasure, restriction, data portability and to object to processing.
You can withdraw your consent at any time, for example to publication in the guestbook.
Contact mikael@abu-trolling.se. You can also complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se.