Privacy Policy

Kilowatts.io Limited ("we", "us", "our") operates Skipedia. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

2. Personal Data We Collect

2.1 Account Information

When you create an account, we collect:

• Email address — used as your username and for account communications
• Password — stored in encrypted form (we cannot see your password)
• Account creation date — for record-keeping purposes

2.2 Social Sign-In Data

If you sign in using Google or Apple, we receive:

• Email address — from your social account
• Name — if provided by the social provider
• Unique identifier — to link your social account to Skipedia

We do not receive or store your social account passwords.

2.3 Usage Data

We collect anonymous usage data to improve the service:

• Error reports (via Sentry)

2.4 Navigation Tracking (Opt-In Only)

If you consent to anonymous navigation tracking, we collect:

• Session ID — a random identifier generated fresh each browser session, not linked to your account
• Page paths — which pages you visit (e.g. /market/2026/01)
• Timestamps — when each page was visited
• Referrer — the website that brought you here (first page only)

This data is stored for 90 days and then automatically deleted. No personal information, IP addresses, or device identifiers are stored. Navigation data is never linked to your user account.

You can enable or disable navigation tracking at any time using the analytics settings below.

3. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Authenticate your identity when you sign in
• Send account-related communications (password resets, security alerts)
• Improve and maintain the service
• Comply with legal obligations

We do not:

• Sell your personal data to third parties
• Use your data for marketing purposes without consent
• Share your data with advertisers

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract — Processing necessary to provide the service you requested
• Consent — Where you have given explicit consent (e.g., creating an account, opting in to navigation tracking)
• Legitimate interests — To improve our service and ensure security
• Legal obligation — Where required by law

5. Data Storage and Security

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account:

• Your personal data will be deleted within 30 days
• Data required for legal compliance may be retained as necessary

Navigation tracking data is automatically deleted after 90 days. Since this data is anonymous and not linked to your account, it cannot be attributed to you after collection.

7. Your Rights

Under UK GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Request restriction of processing
• Portability — Request your data in a portable format
• Object — Object to processing based on legitimate interests
• Withdraw consent — Withdraw consent at any time

To exercise these rights, contact us at hello@kilowatts.io. We will respond within one month.

8. Third-Party Services

We use the following third-party services:

9. Cookies and Local Storage

We use browser local storage to:

• Store authentication tokens (to keep you signed in)
• Remember your preferences (e.g., consent acknowledgements)
• skipedia-analytics-consent — stores your navigation tracking preference ("true" or "false")

We do not use tracking cookies or third-party advertising cookies. If you have opted in to navigation tracking, a random session ID is stored in session storage (cleared when you close your browser tab).

10. International Data Transfers

Your data is primarily stored in the UK (AWS eu-west-2 region). If you use social sign-in, your data may be processed by Google (USA) or Apple (USA) under their respective privacy policies and data transfer mechanisms.

11. Children's Privacy

Skipedia is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the service. Continued use after changes constitutes acceptance.

13. Complaints

If you have concerns about how we handle your data, please contact us first at hello@kilowatts.io.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):