Privacy statement

Who is responsible

Losol AS (org. no. 914 103 339) is the data controller for personal data in the Municipality of Losvik and KOS (the municipal operating system). Send privacy questions to Loading email address ….

What we store

  • Account: an internal ID from the login, your email address, and when the account was created and last updated.
  • Citizen: the citizen name you choose, and which account it belongs to.
  • Activity: the experience points (XP) you earn, what they were for (for example showing up each day) and when.
  • Status: the status you choose on your profile (available, away, handling cases or appear offline).
  • Chat: the messages you write, with their time, and a random pseudonym as your chat ID (for example @losvik_rolig-ramn-k7x2m).
  • Talerett: every citizen can read the chat, but writing takes talerett (the right to speak), granted by the municipality. If you have it, we store that, when and by which administrator it was granted. It is deleted when talerett is removed, and with your account.
  • While you are logged in: the name and email from the login are kept in an encrypted cookie so we can show them in the menu. The name is not stored in our database.
  • Server logs: your IP address and the time of requests, for security and troubleshooting.

We have no ads, no tracking or analytics tools, and no third-party cookies.

Your citizen name is public

Your citizen name is what others see of you in Losvik. It may be shown to other citizens and visitors, for example on notice boards, in lists of offices and draws, on leaderboards and as your nickname in chat.

Your email address and the name from your login are never shown to others. If you don't want people to know who you are, choose a citizen name that doesn't give it away.

In Losvik today

On the front page, signed-in citizens see who has been in Losvik today, with their citizen name and the status they've chosen. It comes from the experience points you get the first time you visit each day, so nothing extra is stored for it.

Visitors who aren't signed in only see how many have been in, never who. If you choose "Appear offline" on your profile, you're left off the list, but you're still counted.

Chat

Messages you write in the chat can be read by other citizens in the Losvik rooms, where you appear under your citizen name. Your chat ID is a random pseudonym that says nothing about who you are.

Messages are stored on our chat server, matrix.losol.no. They are part of Losvik's history and are kept for as long as Losvik exists. You can delete your own messages at any time.

If we delete your account, your messages stay, but the link to you is deleted and you appear in the rooms as "Former citizen". If you want the messages gone, you can delete them yourself first, or ask us to.

Links in messages may get a preview with a title, text and image. Our chat server fetches it and keeps a copy of the image. Your browser shows that copy and loads nothing from the site until you click the link.

Why we process your data

We use your data only to provide the service you asked for: logging you in, giving you a citizen and keeping track of what you do in Losvik. The legal basis is our agreement with you (GDPR Article 6(1)(b)).

We use the server logs with IP addresses to keep the service secure and to find faults. The legal basis for that is our legitimate interest in a safe and stable service (Article 6(1)(f)).

Cookies and local storage

We only use what the service needs to work:

  • civitas_session – keeps you logged in, encrypted, for up to 7 days.
  • oauth_state and oauth_code_verifier – used during the login itself and expire after 10 minutes.
  • PARAGLIDE_LOCALE – remembers your language if you change it, for up to 400 days.
  • Light or dark mode is remembered in your browser (local storage), not by us.
  • While you use the chat, your login to the chat server is kept in the browser's session storage. It is gone when you close the tab or log out.

Storage and deletion

The service, the login, the database and the chat server run on UpCloud servers in Stockholm. UpCloud is our data processor, and your data is not transferred outside the EEA.

Account, citizen and activity are kept for as long as you have an account. If you ask us to delete your account, your citizen and all activity belonging to it are deleted too. Server logs with IP addresses are deleted within three months.

Your rights

You can ask for access to, correction or deletion of your data, ask us to restrict the processing, and get your data exported (data portability). Contact Loading email address …. If you believe we process your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Changes

Losvik is under development. When we add something that changes what we store or show, we update this statement. Last updated 2026-10-02.