Privacy
What Grocery Bot stores about you, and why.
Who is responsible
Astar Consulting AS is the data controller for Grocery Bot. For privacy requests and participant support, contact erik@astar.sh.
What we store
- When you log in: your NM i AI user ID, name and e-mail address from auth.ainm.no, the leaderboard name you choose, and when you accepted these terms.
- When you play with your account: each game’s store, seeds, score, items, orders, rounds, result and time.
- Game diagnostics: response times, timeouts, valid and invalid action counts, wasted actions and score by round. Diagnostics for games played with an account link to that account and game; diagnostics for connections without an account have no account or IP address. Local CLI simulations stay on your computer.
- Service diagnostics: request IDs, route names, status codes, timings, release versions and error locations. We do not record credentials, request bodies or query strings in application diagnostics.
- Website usage: counts of page views, setup and login clicks, and browser errors without error messages, account IDs, IP addresses or persistent tracking identifiers. We use these to improve the event and diagnose problems. Browser privacy signals disable this collection.
- Your bot: the name, shape, colour and eyes you pick. It appears on the leaderboard.
- NM i AI 2026: we compare a fingerprint of your e-mail address with the 2026 participant list, so bots of returning players get a ’26 patch. The list itself holds only fingerprints, not addresses.
- API keys: only a fingerprint and the first characters, never the key itself.
- Cookies: one cookie that keeps you logged in for up to 14 days. No tracking or advertising cookies.
What is public
Your leaderboard name, bot, best scores and number of games appear on the leaderboard. Your name and e-mail address are never shown.
Why and for how long
We use this data to run the competition: to sign you in, to rank your bot and to contact you about the competition if needed. Detailed game and service diagnostics are retained for up to 30 days. Competition data is kept for the 2026 season and deleted or anonymised afterwards.
Login is handled by NM i AI at auth.ainm.no through WorkOS. The site runs on Vercel in Stockholm, and the database is hosted by Neon in the EU.
News from NM i AI
Grocery Bot is part of NM i AI, the Norwegian AI Championship, and you log in with your NM i AI account. When you pick your leaderboard name, you agree that NM i AI may use your name and e-mail address to send you information about the Norwegian AI Championship, such as news, results and upcoming events.
You can unsubscribe at any time, through the link in those e-mails or by writing to erik@astar.sh. NM i AI keeps your name and e-mail address for this purpose until you unsubscribe.
Your rights
You can ask to see, correct or delete your data at any time by writing to erik@astar.sh.