Repository navigation
docs(privacy): explain optional project statistics - #22
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: f6cd41c7dc
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| <h2 id="statistics">Optional project statistics</h2> | ||
| <p>Project statistics are a separate choice, off by default. The app works the same if you decline. The new policy <code>ftw-project-stats-2026-10-v1</code> needs a fresh choice; an earlier consent does not enable it. Hourly collection waits until Sourceful has completed its review and enabled the policy.</p> | ||
| <p>If you then choose to contribute, your box sends recorded energy for each closed hour: grid import and export, solar generation, battery and vehicle charge and discharge. It also sends configured battery capacity, battery and charger power limits, and solar capacity. Values are rounded to 10 Wh or W. No names, addresses, coordinates, device ids or vehicle ids are included. Configured limits do not prove physical control, and missing readings are not zero.</p> | ||
| <p>Sourceful uses these values to improve FTW planning and publish group totals, not for advertising or decisions about a household. Reports are not anonymous: FTW Cloud links a random statistics id to your Cloud home so it can delete them. They are kept for 13 months. Someone with full control of the server can read them; Sourceful provides no staff tool for reading one home's hourly reports.</p> |
There was a problem hiding this comment.
Disclose statistics in the privacy summary
When a user opts into project statistics while leaving the readable copy off, FTW Cloud stores readable household energy reports for 13 months, but the page lede still says the energy data stays on the box and phone, and the meta description says Cloud cannot read traffic unless the readable copy is enabled. Because statistics are a separate choice, these summaries give an incorrect assurance in that configuration; name project statistics as an additional exception in both languages.
Useful? React with 👍 / 👎.
| <h2>The relay, while we move</h2> | ||
| <p>Until every part of FTW has moved to FTW Cloud, the app can also reach your box through Sourceful's older relay at relay.ftw.energy, in Frankfurt, Germany, on Amazon Web Services. It carries the same end-to-end encrypted connection. It sees your phone's IP address, a meeting code that changes every hour, and the size and timing of messages. It keeps none of the traffic, and its access log holds counts, not addresses or codes. We will switch it off.</p> | ||
| <h2>The retired relay</h2> | ||
| <p>The separate relay at relay.ftw.energy is retired. Current connections use FTW Cloud. Older apps or boxes may need an update.</p> |
There was a problem hiding this comment.
Reconcile the retired relay with the rights section
After declaring the relay retired, the rights paragraph still says Sourceful is responsible for data that “FTW Cloud and the relay handle,” using present-tense language; the Swedish page has the same inconsistency. Readers therefore cannot tell whether the relay still processes or retains personal data, so remove it from the current processing scope or explicitly describe any historical data that remains.
Useful? React with 👍 / 👎.
Explain the separate optional project-statistics policy in Swedish and English before collection starts. Owners get a fresh choice; the notice names the rounded hourly energy and configured capacities, Sourceful's link to a Cloud home, 13-month retention, public thresholds, withdrawal and the risk from comparing totals. It states that collection waits for review and activation. The separate anonymous daily report estimates active reporting installations, not lifetime installs or people. Relay is retired.
Paired with srcfl/ftw#1693, srcfl/ftw-cloud#31 and the native consent change. The draft impact assessment is in Cloud's
privacy/project-statistics-dpia.md; this notice does not sign it or enable collection.Validation: inspected the rendered Swedish and English pages in the browser; checked the diff and links. Static HTML, no build.