How this portal handles information

Essential storage

The portal uses host-only, secure cookies to maintain authentication, protect the customer session and enforce the one-hour inactivity timeout. It also uses local storage to coordinate genuine activity between tabs on this device.

These technologies are necessary to provide the secure portal. They are not used for advertising, profiling or cross-site tracking.

Remembering a trusted device

If you actively select “Remember this device”, a separate host-only security token may be stored for up to seven days. It stores neither your password nor your authenticator secret. You can end that trust by signing out from all devices, resetting your password or MFA, or clearing this browser’s site data.

Portal records

We process account identity, project-delivery records, files, approvals and security/audit events needed to provide and protect the service. We keep records only for the operational, contractual, legal and accounting periods that apply to them.

Service providers and your rights

Cloudflare hosts and protects the portal. Supabase provides authentication, database and private-storage services. These providers may process information under their applicable UK data-transfer safeguards.

For access, correction, deletion, restriction, objection or another privacy question, email privacy@norsepantheonproductions.co.uk. Rights depend on the circumstances and may be limited by legal or contractual obligations.