Privacy statement

Who is responsible

Losol AS (org. no. 914 103 339) is the data controller for personal data in the Municipality of Losvik and KOS (the municipal operating system). Send privacy questions to Loading email address ….

What we store

• Account: an internal ID from the login, your email address, and when the account was created and last updated.
• Citizen: the citizen name you choose, and which account it belongs to.
• Activity: the experience points (XP) you earn, what they were for (for example showing up each day) and when.
• Status: the status you choose on your profile (available, away, handling cases or appear offline). It's shown only to you.
• Favourite place: the place you pick on your profile, if you pick one. It's only used to show the morning post from there on the front page.
• Avatar: the choices you make when you make your avatar (skin colour, face shape, hair, beard, glasses, headwear, clothes and colours), if you make one. It shows on your profile and your citizen card.
• Meetups: if you make a meetup, it is stored with your citizen as its host. About answers to meetups, see Meetups.
• Music: beats, loops and songs you save from the drum machine, the synth and the studio, with the title you give them. Only you see them, until you share one by its link: then anyone with the link can hear it, see your citizen name and make their own copy. You can delete them whenever you like, and they are deleted with your account.
• Family: for now, the administrators make the families. If they put you in one, we store which family, whether you are in it as a grown-up or a child, and who put you in and when. The others in the family see your citizen name, role and avatar, no one else does. You can take yourself out of the family (not children under 13, nor the last identified grown-up), and you are taken out of it with your account. If you choose to show the family your week, the others in it see what you see in «Your week» at the university: minutes, days, right answers, new dots, passes and badges. Never wrong answers, and not the administrators. We store only that you have chosen it, and you can turn it off whenever you like.
• Who you are, in a family: every family has an identified grown-up who answers for it. For the grown-up we store their full name and birth date, as an administrator has seen it on their ID (later: as Vipps gives it when they pay for the family), and who did it and when. The family sees the full name; only you and the administrators see the birth date. For a child we store only the month and year of birth, or just the year, never the day, as a grown-up in the family or an administrator gave it, and who did. The child, the grown-ups in the child's families and the administrators see it. It is used for the family's rules, such as children under 13 not taking themselves out of the family. It is deleted with your account.
• Chat: the messages you write, with their time, and a random pseudonym as your chat ID (for example @losvik_rolig-ramn-k7x2m).
• Talerett: every citizen can read the chat, but writing takes talerett (the right to speak), granted by the municipality. If you have it, we store that, when and by which administrator it was granted. It is deleted when talerett is removed, and with your account.
• Notifications: if you turn notifications on, we store the address your browser or the app gets them at. See Notifications.
• While you are logged in: the name and email from the login are kept in an encrypted cookie so we can show them in the menu. The name is not stored in our database.
• Server logs: your IP address and the time of requests, for security and troubleshooting.
• Visitor counts: which pages are visited, see Visitor counts.

We have no ads, no tracking across sites, and no third-party cookies.

Your citizen name is public

Your citizen name is what others see of you in Losvik. It may be shown to other citizens and visitors, for example on notice boards, in lists of offices and draws, on leaderboards and as your nickname in chat.

Your email address and the name from your login are never shown to others. If you don't want people to know who you are, choose a citizen name that doesn't give it away.

In Losvik today

The front page says how many citizens have been in Losvik today, never who. The number comes from the experience points you get the first time you visit each day, so nothing extra is stored for it.

Chat

What you write in the place rooms in the chat can be read by every citizen who is signed in. Visitors who aren't signed in see only the rooms' names and today's message from Bubbi. A single message can still be shared with a link, and whoever gets the link can read it without signing in. You appear under your citizen name. Your chat ID is a random pseudonym that says nothing about who you are.

Messages are stored on our chat server, matrix.losol.no. They are part of Losvik's history and are kept for as long as Losvik exists. You can delete your own messages at any time. They're then gone for everyone, but we can't take back what others have copied or saved.

If we delete your account, your messages stay, but the link to you is deleted and you appear in the rooms as "Former citizen". If you want the messages gone, you can delete them yourself first, or ask us to.

The municipality can also create private rooms, for example for the admins. An admin decides who is in them, and only members see the room and its messages. We store who is in a room, who added them and when. If you're taken out of a room or delete your account, the membership is deleted.

You can also have a private conversation with one other citizen. The one you write to gets a request, and has to accept before they see the messages. Only the two of you see the conversation. We store who the conversation is between, who asked, and whether the request was accepted or declined. If you decline, the one who asked isn't told.

You can also make a group and invite several. Each of them gets a request, and has to accept to join. The one who made the group invites; if they leave it, it passes to whoever has been in it longest. We store the group's name, who is in it, who invited them and what they answered.

If you are in a family, you are also in the family's chat. Only you in the family are in it, and everyone can write. If you leave the family, or are taken out of it, you leave the chat too. If the family is deleted, everyone is taken out of the chat.

Private conversations, groups and the family's chat are not end-to-end encrypted: the messages are on our chat server, like other messages. We don't read them, except when one of those in it reports a breach of the rules, or when the law requires it. A report is an email to us with a code that says which conversation it's about.

Links in messages may get a preview with a title, text and image. Our chat server fetches it and keeps a copy of the image. Your browser shows that copy and loads nothing from the site until you click the link.

Notifications

Notifications are up to you. They are off until you turn them on yourself, in the browser (on your profile or at the bottom of the chat) or in the app, and you can turn them off again whenever you like, there or in your browser's or phone's settings. The chat works the same without them.

You get a notification when someone writes to you in a conversation or a group, or asks to chat with you or to have you in a group. It shows who wrote and the start of the message, or the group's name, and how many new things you have in the chat. Messages in the place rooms don't notify.

To a browser, the notification goes through the push service of the browser's maker: Google (Chrome and others), Mozilla (Firefox), Apple (Safari) or Microsoft (Edge on Windows). Its content is encrypted, so only your browser can read it. The push service only sees that a notification comes from us, when, and how big it is.

To the app, the notification goes through Expo, which hands it on to Apple or Google. There the content isn't encrypted all the way, so Expo, Apple and Google can see it.

These companies may process the notifications outside the EEA, including in the USA. If you don't want messages shown on your lock screen, you can hide their content in your phone's or computer's notification settings.

We store the address your browser or the app gets notifications at, and for a browser the keys the notification is encrypted with. They are deleted when you turn notifications off, log out in that browser or app, delete your account, or when the push service says the address is no longer in use.

Meetups

A meetup is something people are getting together for, and has a link its host sends to those who are coming. You need no account to answer. If you answer, we store the name you write and which times suit you (yes, maybe or no). Everyone with the link sees the names and answers, and the page isn't shown in search engines.

The host can also enter answers for people who answered another way, by phone or text, say. We then store the name the host writes, marked as entered by the host, and it's deleted like the other answers.

Your browser gets a random key in the cookie civitas_treff, so you can come back and change your answer. We keep it only as a code made from the key and the meetup, so your answers to different meetups can't be linked.

The names and answers are deleted a month after the day the host picked, or a month after the last day to answer if no day is picked. You can remove your answer yourself while the meetup takes answers, the host can remove an answer, and if the host deletes the meetup, all its answers go. The legal basis is our legitimate interest in helping those meeting find a day (Article 6(1)(f)).

Velforeninga

Velforeninga is a membership for those who want to help keep Losvik going, for one or for a family of up to six. If you're a member, we store which plan it is, which account pays, who the membership covers, how long it's paid for, and whether and when it was ended. Those covered by the same membership see each other's citizen names on its page, and who pays.

Until paying with Vipps is in place, an administrator enters memberships by hand, paid another way or given free, and we store which it is. When Vipps comes, we store the number of the agreement with Vipps, never card or account details: Vipps has those. The basis is our contract with you (Article 6(1)(b)). The data is deleted with your account; what the accounts need about payments is kept as long as the Bookkeeping Act requires.

Why we process your data

We use your data only to provide the service you asked for: logging you in, giving you a citizen and keeping track of what you do in Losvik. The legal basis is our agreement with you (GDPR Article 6(1)(b)).

We use the server logs with IP addresses to keep the service secure and to find faults. The legal basis for that is our legitimate interest in a safe and stable service (Article 6(1)(f)).

Visitor counts

To see which pages are used, we count visits with Umami, which we run ourselves at umami.losol.no. It uses no cookies and keeps no IP addresses, and the counts are not linked to your account or your citizen. For each page view it records the page's address (without anything after ? or #), the page you came from, the browser, the operating system, the kind of device, the screen size, the language, and roughly where you are (country, region and city, looked up from the IP address). Visits within the same month are grouped by a code made from the IP address and the browser, which can't be traced back to you.

The legal basis is our legitimate interest in knowing what Losvik is used for, so we can make it better (Article 6(1)(f)).

Cookies and local storage

We only use what the service needs to work:

• civitas_session – a random key to your session, which we keep (who you are, and a token we use to check with Los ID once a day that the account is still active). The session lasts up to 180 days from your last use, or until you sign out.
• oauth_state, oauth_code_verifier and oauth_return_to – used during the login itself and expire after 10 minutes. The last one remembers the page you signed in from, so you end up back there.
• PARAGLIDE_LOCALE – remembers your language if you change it, for up to 400 days.
• civitas_treff – set only once you answer a meetup, and lets you change your answer. A random key that lasts a year. See Meetups.
• Light or dark mode is remembered in your browser (local storage), not by us.
• What you make in the drum machine, the synth and the studio is remembered as a draft in your browser (local storage), so it isn't lost if the page is closed. It isn't sent to us until you save it.
• While you use the chat, your login to the chat server is kept in the browser's session storage. It is gone when you close the tab or log out.
• If you turn notifications on, KOS installs a service worker in your browser. It shows the notifications and opens the conversation when you tap one, and stores nothing else. Once you've answered the tip about notifications in the chat, your browser remembers it (local storage), so you don't get it again.

Storage and deletion

The service, the login, the database and the chat server run on UpCloud servers in Stockholm. UpCloud is our data processor, and your data is not transferred outside the EEA, except for notifications you turn on yourself (see Notifications).

Account, citizen and activity are kept for as long as you have an account. If you ask us to delete your account, your citizen and all activity belonging to it are deleted too. Server logs with IP addresses are deleted within three months.

Your rights

You can ask for access to, correction or deletion of your data, ask us to restrict the processing, and get your data exported (data portability). Contact Loading email address …. If you believe we process your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Changes

Losvik is under development. When we add something that changes what we store or show, we update this statement. Last updated 2026-10-23.