Skip to main content

Privacy statement

Who is responsible

Losol AS (org. no. 914 103 339) is the data controller for personal data in the Municipality of Losvik and KOS (the municipal operating system). Send privacy questions to Loading email address ….

What we store

  • Account: an internal ID from the login, your email address, and when the account was created and last updated.
  • Citizen: the citizen name you choose, and which account it belongs to.
  • Activity: the experience points (XP) you earn, what they were for (for example showing up each day) and when.
  • Status: the status you choose on your profile (available, away, handling cases or appear offline).
  • Favourite place: the place you pick on your profile, if you pick one. It's only used to show the morning post from there on the front page.
  • Chat: the messages you write, with their time, and a random pseudonym as your chat ID (for example @losvik_rolig-ramn-k7x2m).
  • Talerett: every citizen can read the chat, but writing takes talerett (the right to speak), granted by the municipality. If you have it, we store that, when and by which administrator it was granted. It is deleted when talerett is removed, and with your account.
  • Notifications: if you turn notifications on, we store the address your browser or the app gets them at. See Notifications.
  • While you are logged in: the name and email from the login are kept in an encrypted cookie so we can show them in the menu. The name is not stored in our database.
  • Server logs: your IP address and the time of requests, for security and troubleshooting.

We have no ads, no tracking or analytics tools, and no third-party cookies.

Your citizen name is public

Your citizen name is what others see of you in Losvik. It may be shown to other citizens and visitors, for example on notice boards, in lists of offices and draws, on leaderboards and as your nickname in chat.

Your email address and the name from your login are never shown to others. If you don't want people to know who you are, choose a citizen name that doesn't give it away.

In Losvik today

On the front page, signed-in citizens see who has been in Losvik today, with their citizen name and the status they've chosen. It comes from the experience points you get the first time you visit each day, so nothing extra is stored for it.

Visitors who aren't signed in only see how many have been in, never who. If you choose "Appear offline" on your profile, you're left off the list, but you're still counted.

Chat

What you write in the place rooms in the chat can be read by every citizen who is signed in. Visitors who aren't signed in see only the rooms' names and today's message from Bubbi. A single message can still be shared with a link, and whoever gets the link can read it without signing in. You appear under your citizen name. Your chat ID is a random pseudonym that says nothing about who you are.

Messages are stored on our chat server, matrix.losol.no. They are part of Losvik's history and are kept for as long as Losvik exists. You can delete your own messages at any time. They're then gone for everyone, but we can't take back what others have copied or saved.

If we delete your account, your messages stay, but the link to you is deleted and you appear in the rooms as "Former citizen". If you want the messages gone, you can delete them yourself first, or ask us to.

The municipality can also create private rooms, for example for the admins. An admin decides who is in them, and only members see the room and its messages. We store who is in a room, who added them and when. If you're taken out of a room or delete your account, the membership is deleted.

You can also have a private conversation with one other citizen. The one you write to gets a request, and has to accept before they see the messages. Only the two of you see the conversation. We store who the conversation is between, who asked, and whether the request was accepted or declined. If you decline, the one who asked isn't told.

You can also make a group and invite several. Each of them gets a request, and has to accept to join. The one who made the group invites; if they leave it, it passes to whoever has been in it longest. We store the group's name, who is in it, who invited them and what they answered.

Private conversations and groups are not end-to-end encrypted: the messages are on our chat server, like other messages. We don't read them, except when one of those in it reports a breach of the rules, or when the law requires it. A report is an email to us with a code that says which conversation it's about.

Links in messages may get a preview with a title, text and image. Our chat server fetches it and keeps a copy of the image. Your browser shows that copy and loads nothing from the site until you click the link.

Notifications

Notifications are up to you. They are off until you turn them on yourself, in the browser (on your profile or at the bottom of the chat) or in the app, and you can turn them off again whenever you like, there or in your browser's or phone's settings. The chat works the same without them.

You get a notification when someone writes to you in a conversation or a group, or asks to chat with you or to have you in a group. It shows who wrote and the start of the message, or the group's name, and how many new things you have in the chat. Messages in the place rooms don't notify.

To a browser, the notification goes through the push service of the browser's maker: Google (Chrome and others), Mozilla (Firefox), Apple (Safari) or Microsoft (Edge on Windows). Its content is encrypted, so only your browser can read it. The push service only sees that a notification comes from us, when, and how big it is.

To the app, the notification goes through Expo, which hands it on to Apple or Google. There the content isn't encrypted all the way, so Expo, Apple and Google can see it.

These companies may process the notifications outside the EEA, including in the USA. If you don't want messages shown on your lock screen, you can hide their content in your phone's or computer's notification settings.

We store the address your browser or the app gets notifications at, and for a browser the keys the notification is encrypted with. They are deleted when you turn notifications off, log out in that browser or app, delete your account, or when the push service says the address is no longer in use.

Why we process your data

We use your data only to provide the service you asked for: logging you in, giving you a citizen and keeping track of what you do in Losvik. The legal basis is our agreement with you (GDPR Article 6(1)(b)).

We use the server logs with IP addresses to keep the service secure and to find faults. The legal basis for that is our legitimate interest in a safe and stable service (Article 6(1)(f)).

Cookies and local storage

We only use what the service needs to work:

  • civitas_session – keeps you logged in, encrypted, for up to 7 days.
  • oauth_state, oauth_code_verifier and oauth_return_to – used during the login itself and expire after 10 minutes. The last one remembers the page you signed in from, so you end up back there.
  • PARAGLIDE_LOCALE – remembers your language if you change it, for up to 400 days.
  • Light or dark mode is remembered in your browser (local storage), not by us.
  • While you use the chat, your login to the chat server is kept in the browser's session storage. It is gone when you close the tab or log out.
  • If you turn notifications on, KOS installs a service worker in your browser. It shows the notifications and opens the conversation when you tap one, and stores nothing else. Once you've answered the tip about notifications in the chat, your browser remembers it (local storage), so you don't get it again.

Storage and deletion

The service, the login, the database and the chat server run on UpCloud servers in Stockholm. UpCloud is our data processor, and your data is not transferred outside the EEA, except for notifications you turn on yourself (see Notifications).

Account, citizen and activity are kept for as long as you have an account. If you ask us to delete your account, your citizen and all activity belonging to it are deleted too. Server logs with IP addresses are deleted within three months.

Your rights

You can ask for access to, correction or deletion of your data, ask us to restrict the processing, and get your data exported (data portability). Contact Loading email address …. If you believe we process your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Changes

Losvik is under development. When we add something that changes what we store or show, we update this statement. Last updated 2026-10-07.