EnergyAccessDesigner
DATA PROTECTION

Privacy Policy

How this application handles location, usage and optimization data.

What the application processes

When you visit, the web server receives your IP address and ordinary HTTP metadata needed to deliver the page. Routine Caddy and Uvicorn access logs are disabled in the prepared configuration. Operational error logs may still be produced, and Docker rotates container logs by size. The prepared public deployment targets a Contabo VPS. No analytics, advertising pixels or tracking cookies are intentionally included.

When you click the map, the browser sends the selected coordinates to this server. It requests a PVGIS typical weather year for that location and a Nominatim city/region label. The application does not intentionally forward your IP address to those two providers, but they receive the coordinates and this server's IP address. Weather and coordinates are held in an in-memory cache of up to 16 sites. Entries become invalid after two hours and are removed on the next cache access, earlier eviction or server restart. Nominatim labels become invalid after 24 hours and are likewise removed on the next lookup, earlier eviction or restart.

Optimization requests include the selected location/weather reference, synthetic load selection, technology choices, costs and prices. One worker runs jobs in memory; no application database or disk record is created for individual jobs. The input request is discarded once a job finishes or fails. Completed or failed job records and results are kept for at most one hour after completion, then removed by the background cleanup; at most 100 completed jobs are retained. Queued/running jobs remain until they finish or the process restarts. Anyone with a valid job identifier can retrieve that job during this period; do not enter confidential information. Client IPs are represented only by process-local keyed hashes in in-memory rate-limit records. Stale records are removed on the next rate-limit check or server restart; the oldest active records are at most one hour old.

External services

Your browser requests map tiles directly from Stadia Maps, which can receive your IP address, tile coordinates and browser/request metadata. Tile use also involves OpenMapTiles/OpenStreetMap data. The browser does not contact Google Fonts or a Leaflet CDN because those files are hosted here. This server contacts European Commission JRC PVGIS for weather, OpenStreetMap Foundation Nominatim for location labels and, if USD display is selected, the European Central Bank for a reference exchange rate. Provider processing locations, retention and cross-border transfers require a final provider and legal review.

Purpose and email contact

The data above are used to deliver the website, protect it against excessive requests, resolve the selected location and calculate the requested demonstration result. This site has no contact form. Email sent through the Contact page is handled by the sender's mail provider and the project mailbox.

Your rights

Depending on applicable law, you may ask for access, correction, deletion, restriction, portability or objection and may complain to a competent supervisory authority. In-memory data may already have expired, and the application cannot reliably identify a stored job from a person without its job identifier.