Skip to content

docs(privacy): explain optional project statistics - #22

Merged
frahlg merged 1 commit into
mainfrom
feat/project-statistics-privacy
Oct 17, 2026
Merged

frahlg merged 1 commit into
mainfrom
feat/project-statistics-privacy

Conversation

@frahlg

@frahlg frahlg commented Oct 17, 2026

Copy link
Copy Markdown
Member

Explain the separate optional project-statistics policy in Swedish and English before collection starts. Owners get a fresh choice; the notice names the rounded hourly energy and configured capacities, Sourceful's link to a Cloud home, 13-month retention, public thresholds, withdrawal and the risk from comparing totals. It states that collection waits for review and activation. The separate anonymous daily report estimates active reporting installations, not lifetime installs or people. Relay is retired.

Paired with srcfl/ftw#1693, srcfl/ftw-cloud#31 and the native consent change. The draft impact assessment is in Cloud's privacy/project-statistics-dpia.md; this notice does not sign it or enable collection.

Validation: inspected the rendered Swedish and English pages in the browser; checked the diff and links. Static HTML, no build.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 17, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-17T14:05:18.463514Z f6cd41c PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f6cd41c7dc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread privacy.html
<h2 id="statistics">Optional project statistics</h2>
<p>Project statistics are a separate choice, off by default. The app works the same if you decline. The new policy <code>ftw-project-stats-2026-10-v1</code> needs a fresh choice; an earlier consent does not enable it. Hourly collection waits until Sourceful has completed its review and enabled the policy.</p>
<p>If you then choose to contribute, your box sends recorded energy for each closed hour: grid import and export, solar generation, battery and vehicle charge and discharge. It also sends configured battery capacity, battery and charger power limits, and solar capacity. Values are rounded to 10 Wh or W. No names, addresses, coordinates, device ids or vehicle ids are included. Configured limits do not prove physical control, and missing readings are not zero.</p>
<p>Sourceful uses these values to improve FTW planning and publish group totals, not for advertising or decisions about a household. Reports are not anonymous: FTW Cloud links a random statistics id to your Cloud home so it can delete them. They are kept for 13 months. Someone with full control of the server can read them; Sourceful provides no staff tool for reading one home's hourly reports.</p>

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Disclose statistics in the privacy summary

When a user opts into project statistics while leaving the readable copy off, FTW Cloud stores readable household energy reports for 13 months, but the page lede still says the energy data stays on the box and phone, and the meta description says Cloud cannot read traffic unless the readable copy is enabled. Because statistics are a separate choice, these summaries give an incorrect assurance in that configuration; name project statistics as an additional exception in both languages.

Useful? React with 👍 / 👎.

Comment thread privacy.html
<h2>The relay, while we move</h2>
<p>Until every part of FTW has moved to FTW Cloud, the app can also reach your box through Sourceful's older relay at relay.ftw.energy, in Frankfurt, Germany, on Amazon Web Services. It carries the same end-to-end encrypted connection. It sees your phone's IP address, a meeting code that changes every hour, and the size and timing of messages. It keeps none of the traffic, and its access log holds counts, not addresses or codes. We will switch it off.</p>
<h2>The retired relay</h2>
<p>The separate relay at relay.ftw.energy is retired. Current connections use FTW Cloud. Older apps or boxes may need an update.</p>

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Reconcile the retired relay with the rights section

After declaring the relay retired, the rights paragraph still says Sourceful is responsible for data that “FTW Cloud and the relay handle,” using present-tense language; the Swedish page has the same inconsistency. Readers therefore cannot tell whether the relay still processes or retains personal data, so remove it from the current processing scope or explicitly describe any historical data that remains.

Useful? React with 👍 / 👎.

@frahlg
frahlg merged commit 4073dbb into main Oct 17, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant