Privacy Policy
Last updated 13 September 2026
Who we are
Bellator Labs is a small software studio based in Oslo, with a second base in Gothenburg. We build software, apps, and websites for clients we work with directly, not through a chain of account managers. This page explains what information we collect when you visit our site, talk to BellatorBot, or use the customer portal, and what we do with it.
What we collect
When you fill out a contact or quote form, we collect your name, email address, and whatever project details you choose to share. Those submissions are handled through our form provider, Web3Forms. If you talk to BellatorBot, your messages are kept for 90 days so we can review and improve its answers, then they're deleted automatically. We also set a small cookie that remembers whether you prefer English or Norwegian. For a visitor who never signs in, that's the whole list. If you sign in to the customer portal, a second cookie keeps you signed in, and the next section covers what comes with that.
The customer portal
The portal is invite-only, for clients we're working with. If you have an account, we store your name, your email address, and the projects we're doing for you: their names, their status, and the work updates we write for you to read. Signing in uses a one-time code sent to your email through Resend, our email provider, so there's no password to store. Each sign-in creates a session record, which is a random token and its dates. It does not record your IP address or your browser. A session stays valid while you keep using it and expires after seven days without use; signing out ends it, and you can sign out other devices from the portal. To stop anyone flooding the sign-in with code requests, we keep a count of requests per IP address for five minutes, and that count is cleared automatically once the window has passed. We also keep a log of the changes our staff make to your projects, so we can always tell you who did what.
Where it lives
The site runs on Vercel, and the portal's database is hosted by Turso in Ireland. Vercel handles your connection and, like any host, sees your IP address while it does — that's how the internet works, and we don't keep a copy beyond the five-minute sign-in count described above. Login codes go out through Resend and form submissions through Web3Forms. They handle your data for us, not for themselves.
What we don't do
We don't run analytics or tracking scripts on this site, and we've never sold or shared your information with anyone. No ad network, no hidden pixels, no third party quietly watching what you do here.
How we use it
We use what you share with us to respond to your enquiry, deliver the project you hire us for, and occasionally to make BellatorBot's answers a bit better. What's in the portal is there because running your project needs it, and for no other reason. That's the whole list.
How long we keep it
We keep your account and your project history while we're working together. When we're done, we delete it — the account, the projects, the updates, and our internal log of who changed what. There's nothing we want to hold on to afterwards. Ask us to delete it sooner and we will. Two things are separate from this: invoices and accounting records, which we're required to keep for five years and which live in our accounting system rather than the portal, and the sign-in request count above, which clears itself after five minutes.
Your rights
You're welcome to ask us at any time what we hold about you, have it corrected, or have it deleted entirely. That includes your portal account: if we remove it, your projects and updates go with it. Send an email to hello@bellator-labs.com and we'll take care of it. If you think we've handled your data badly and we haven't put it right, you can complain to Datatilsynet, the Norwegian Data Protection Authority.
Changes
If anything about how we handle your data changes, we'll update this page and move the date at the top. We won't make quiet changes behind your back.