Privacy statement

The deal

GridWitness measures the GB electricity grid using sensors you already own. We ask for the least revealing thing that is useful — grid frequency — and every step beyond that is an explicit, revocable choice you make. We will never ask for data we cannot justify to you.

What each thing tells us

Grid frequency is the same for everyone connected to the GB grid at a given instant. Sharing it tells us nothing about your household. It's the default, and on its own it's genuinely useful.

Voltage is a reading about the feeder your house sits on, not about you. It helps map where the grid is strong or weak. Low sensitivity.

Current, power and power factor are the sensitive ones. Your load reveals when you're home, sleep, cook or charge a car. We ask only if you actively choose to share it, never bundled with anything else. The reason it's worth asking: a node sharing its own power becomes self-calibrating, letting us recover local grid strength and correct the sensor. If that trade isn't worth it to you, don't share it — frequency alone still helps.

Weather is outdoor ambient conditions, not your behaviour. It helps model how weather drives demand and generation. Low sensitivity; the main consideration is that it implies your rough location.

Location, and how precise you want to be

• Anonymous (default): we derive only a rough grid supply area from your connection. No address.
• Region: you pick your DNO or grid region from a list. No address.
• Data-share: you enter your postcode so we can place your readings more precisely. Your postcode never leaves our server and is never published — only a derived area code (a grid supply point or primary substation) is attached to the data.

We're honest about the ceiling: even in data-share mode we pin to a grid supply point or primary substation, not your individual street cable. We don't have the data to do that, and we won't claim to.

What we keep private and never publish

Your postcode and precise location, the link between a node and you, and your access token (kept hashed). Published data carries only a random node id and derived area codes.

Your rights — and why a confirmed email matters

Anyone can register and start contributing without confirming their email. But changing what a node shares, or deleting your data, requires a confirmed email address. That confirmation is how we prove the account is really yours before acting on your data — GDPR requires us to be sure. Every node you create is always linked to your account, so once your identity is confirmed we can always honour:

• Rectification — change or withdraw any consent at any time from your dashboard.
• Erasure — "erase this node" removes your server record and marks your already-contributed data for removal from the research lake.
• Access — ask us what we hold about you.

We collect the bare minimum personal data needed to enforce these rights: a confirmable email address and the link between your account and your nodes. Nothing more.

Legal basis and controller

The server operator is the data controller. Processing rests on explicit consent for the sensitive and location channels, and legitimate interest for the non-identifying grid-frequency research. Data is retained under a stated retention policy, and the private database is encrypted at rest.

This statement is being finalised and legally reviewed ahead of public onboarding.