Privacy Policy

1. Introduction

Kilowattlas™ ("we", "our", or "the Service") is owned and operated by Serenit AB, a Swedish company. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our electricity infrastructure mapping service.

In compliance with GDPR (General Data Protection Regulation - EU 2016/679), we ensure that any personal data processed is done so lawfully, fairly, and transparently.

2. Data Controller

The data controller responsible for your personal data is Serenit AB. For questions regarding data protection, please contact us through the information provided on the Service.

3. Information We Collect

3.1 Information We DO NOT Collect

Kilowattlas is designed with privacy in mind. We do not collect:

• Personal identification information (name, email, phone number) — unless you choose to create an account in a future release
• Payment or financial information
• Location data beyond what you choose to view on the map
• Cookies or tracking identifiers for advertising purposes
• Data shared with third-party advertising networks

3.2 Technical Information We May Collect

To operate the Service, we may collect limited technical information:

• Server Logs: IP addresses, browser type, operating system, pages viewed, and timestamps (retained for security and performance monitoring only)
• Map Interactions: Anonymous usage statistics like map zoom levels, layers toggled, and geographic areas viewed (aggregated and anonymized)
• Error Reports: Technical error information to improve Service stability

This technical data is collected anonymously and cannot be used to identify you personally.

3.3 Web Analytics

We use Matomo (formerly Piwik), a privacy-focused, self-hosted web analytics platform to understand how users interact with the Service. Matomo is hosted on our own server — no data is sent to third parties. Analytics are only collected if you give your consent via our cookie banner. If consent is not granted, no analytics data or cookies are collected. The analytics system:

• Is disabled by default — activated only after you grant consent
• Sets first-party cookies (_pk_id, _pk_ses and related) used solely for distinguishing visitors and sessions on this site
• Does not track users across other websites or create cross-site profiles
• Does not collect User IDs or personally identifiable information
• Anonymizes IP addresses before processing (at least 2 bytes masked, e.g. 192.168.x.x becomes 192.168.0.0)
• Stores data exclusively on our own server within the EU (no third-party data sharing)
• Collects only aggregated, anonymous metrics (page views, referrers, browser types)
• Respects "Do Not Track" browser settings — if enabled, no data is sent even with consent
• Retains analytics data for a maximum of 25 months, after which it is automatically deleted
• Is fully GDPR compliant with data minimization principles

Withdrawing consent: You may withdraw analytics consent at any time via Cookie Settings in the site menu. When you withdraw consent, the analytics cookies are cleared and no further data is collected. You may additionally use the Matomo opt-out page at analytics.kilowattlas.com opt-out, or enable "Do Not Track" in your browser.

Advertisement Click Tracking: The Service may display advertisements or sponsored content in the future. If implemented, we will track anonymous click events (which ads were clicked, when, and from which pages) to measure advertising effectiveness. This tracking:

• Does not identify individual users or create user profiles
• Records only aggregated, anonymous click statistics
• Is processed on our own servers (not shared with third-party ad networks)
• Does not involve cookies that track you across other websites
• Complies with GDPR data minimization requirements

All analytics data is processed under our Legitimate Interest legal basis (GDPR Article 6(1)(f)) to improve the Service and measure effectiveness. You have the right to object to this processing at any time.

3.4 Local Storage

We use browser local storage to save your preferences (theme choice, language, visible map layers) and your cookie consent choices locally on your device. This data never leaves your browser and is not transmitted to our servers.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on the following legal grounds:

• Legitimate Interest (Article 6(1)(f)): Minimal server-log data required to operate, secure, and troubleshoot the Service
• Consent (Article 6(1)(a)): Analytics and non-essential preference cookies are set only after you grant consent via the cookie banner. Consent can be withdrawn at any time via Cookie Settings in the site menu

5. How We Use Your Information

Any technical information collected is used solely for:

• Operating and maintaining the Service
• Improving user experience and Service performance
• Detecting and preventing security threats or abuse
• Analyzing aggregated, anonymous usage patterns to improve features
• Measuring advertisement effectiveness (if ads are implemented)

We do not:

• Sell or share your data with third parties for marketing
• Use your data for targeted advertising or personalized ads
• Track you across other websites
• Build user profiles or behavioral tracking systems
• Share individual click data with advertisers (only aggregated statistics)

6. Third-Party Services

6.1 Data Sources

Kilowattlas displays data from third-party sources:

• OpenStreetMap: Map tiles and infrastructure data (see OSM Copyright)
• Svenska Kraftnät (SVK): Swedish electricity grid data
• ENTSO-E: European electricity transmission data
• ECMWF: European Centre for Medium-Range Weather Forecasts
• SCB: Statistics Sweden (Statistiska centralbyrån)
• Global Energy Monitor: Energy infrastructure data
• PyPSA: Python for Power System Analysis

When you use the Service, your browser may directly request map tiles and data from these providers. These requests are subject to their respective privacy policies.

6.2 Third-Party Analytics

We do not use third-party tracking services like Google Analytics. Our web analytics platform is self-hosted on our own infrastructure, meaning no data is sent to external companies for analysis or marketing purposes.

7. Data Retention

Technical logs and anonymous usage data are retained for a maximum of 90 days for security and operational purposes, after which they are automatically deleted.

Local storage preferences remain on your device until you manually clear your browser data.

8. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of Access (Article 15): Request information about any personal data we process
• Right to Rectification (Article 16): Request correction of inaccurate data
• Right to Erasure (Article 17): Request deletion of your data
• Right to Restriction (Article 18): Request limited processing of your data
• Right to Data Portability (Article 20): Request your data in a machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Article 7): Withdraw consent at any time
• Right to Lodge a Complaint (Article 77): File a complaint with your national data protection authority

To exercise any of these rights, please contact us. Note that due to our minimal data collection, we may not have any personal data associated with you.

9. Data Security

We implement appropriate technical and organizational measures to protect any data we process:

• HTTPS encryption for all data transmission
• Secure server infrastructure
• Regular security updates and monitoring
• Access controls and authentication for backend systems
• Automated deletion of old logs

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Cookies and Tracking

We do not use cookies for advertising or cross-site tracking purposes. All cookies set by Kilowattlas are first-party cookies on the kilowattlas.com domain.

On your first visit, a cookie banner asks you to choose which categories of cookies you accept. You can review or change your choice at any time by opening Cookie Settings from the site menu.

10.1 Cookie Categories

Cookies are grouped into three categories:

• Strictly necessary — required for the Service to function, including any future login sessions. Always on and do not require consent under GDPR. Examples: future authentication session cookie, cookie-consent record itself (stored in local storage).
• Preferences — remember choices such as theme and language between visits. Stored as browser local storage on your device; not transmitted to our servers. Set only with your consent.
• Analytics — used by Matomo to count visitors and understand how the site is used. Set only with your consent. Includes Matomo's _pk_id (13-month lifetime) and _pk_ses (30-minute session) cookies.

10.2 Withdrawing or Changing Consent

You can withdraw or change your consent at any time:

• Open the site menu and choose Cookie Settings to adjust which categories are enabled.
• Withdrawing analytics consent clears the related cookies from your browser and stops further collection.
• You can also delete cookies directly from your browser settings.

10.3 Advertising

If advertisements or sponsored content are introduced in the future, any click measurement will be anonymous, first-party, and subject to its own consent category added to Cookie Settings before activation.

11. International Data Transfers

Our servers are located in the European Union (Sweden). If you access the Service from outside the EU, your technical data may be transferred to and processed in Sweden in accordance with GDPR standards.

12. Children's Privacy

The Service is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your GDPR rights, or want to file a data protection complaint, please contact us through the information provided on the Service.

You also have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten - IMY):

https://www.imy.se/

15. Summary

In short: Kilowattlas collects minimal anonymous technical data needed to operate and improve the Service. Analytics are off by default and only activated if you grant consent via the cookie banner; you can withdraw that consent at any time via Cookie Settings in the site menu. Our analytics are privacy-focused and self-hosted — we do not track you across websites, do not create user profiles, do not sell your data, and do not use third-party advertising trackers. Your privacy is respected and protected in accordance with GDPR.