A demonstration portal should not need to profile its visitor.
ETHICA uses no external advertising, tracking pixels or third-party analytics. Its first-party statistics are aggregated without persistent visitor identifiers and cannot reconstruct an individual person's reading.
What the site measures
The site aggregates page views, the referring domain, voluntary UTM campaign codes, language, broad device class, browser family, operating-system family and country. It also counts approved event categories such as reading depth, clicks on the pamphlet, book, Claim Meter, sources and sharing controls, subscription starts, broad loading-time bands and script errors.
From 26 September 2026, an engaged reading event requires at least 30 seconds in a visible, focused tab and 50 percent scroll depth (or the entire page fitting on screen). It is sent at most once per page load and is not linked to other page visits or giveaway points. Clicks to the introduction, solutions, budget and Roadmap, and successful confirmation-email requests are counted separately. These are not unique people, confirmed subscriptions or purchases. Known crawlers are filtered, but automated traffic may remain.
Signals are reduced to those categories before storage. The server does not store IP addresses, complete user-agent strings, precise location, full referring URLs, form contents or element text. It creates no cookie or persistent visitor identity. Events are aggregated by day and cannot be joined into an individual's navigation history.
Detailed daily aggregates are retained for 90 days. They are then reduced to month, page, event type and language; traffic source, campaign, technology and geography are deleted. Global Privacy Control and Do Not Track stop this analytics collection.
Some demonstrations use localStorage or sessionStorage for local demo state. The public visit counter uses a temporary session marker so a reload in the same tab session is not counted again. It contains no identifier and disappears when the session ends.
The reports describe page views, sessions and aggregate events, not unique people. Returning visitors will be recognised only if a future feature has a clear need, the visitor first gives explicit consent and this privacy information is updated before activation.
The portal contains no real e-ID login, government integration, collection of real votes or processing of sensitive personal data.
They demonstrate information flows; they are not live public-service forms.
Only a signed-in and specifically authorised ETHICA administrator can see the aggregate reports. There are no individual raw visitor records to display or export.
Purchases, newsletters and continued data minimisation
Data minimisation
The purchase flow requests only what is needed for the order, payment reconciliation, invoice records, licensed delivery, support and statutory accounting. It does not collect national identity numbers, card details or political information.
Separate newsletter consent
Subscription is voluntary, unticked by default, double-confirmed and can be cancelled in every message. Transactional purchase email is sent regardless of the newsletter choice.
Payment remains separate
A Bankgiro order records its reference and reconciliation status, not bank credentials. Once Klarna, cards and Swish are connected, payment details are handled by Kustom/WooCommerce and the respective provider, not by the portal.
Data used when the book is ordered.
The controller is S.W.Coach AB, Swedish company number 556196-8867. To fulfil the purchase contract, the portal processes name, email, phone number, Swedish billing address, order reference, price, VAT, any coupon, payment status and licence ID. Business purchases may also include company details and an internal reference.
The private status link contains a random access key. The server stores only a cryptographic verifier. The delivery register records whether the single download has been used and whether an administrator reset it after a verified technical failure.
The legal bases are performance of the contract and compliance with accounting and tax obligations. Accounting records are retained for the legally required period. Delivery data outside those records is erased after the support and claims period; the exact retention schedule remains part of the documented quality programme.
Do not share it. Contact lars-gunnar@ethicademocracy.org if it is lost or a technical failure interrupts the download.
An explicit ETHICA track — not passive behavioural profiling.
The eight-week weekly-letter and book-giveaway pilot uses separate consent choices for the subscription and participation. The subscription is confirmed by email double opt-in. A participant may always retain the base chance without collecting bonus points.
Points arise only when a confirmed participant actively selects “Add this step”. The system stores the step code, week, points and time under a pseudonymous participant ID. Ordinary page views, reading time, political opinions, demo answers, IP addresses and device profiles are not used for scoring.
A necessary signed participant marker is stored in the browser after confirmation. It connects explicit point events to the correct pseudonym and is not used for advertising or cross-site tracking.
The data controller is S.W.Coach AB, Swedish company number 556196-8867. Consent is the legal basis for the weekly letter and giveaway entry. Brevo is used as a processor for the email address, confirmation and delivery. The portal’s point database does not store the email address; it holds consent timestamps, a keyed pseudonymous ID and the steps the participant explicitly added.
The contact record remains with the newsletter provider until the subscription is cancelled. Pilot points and eligibility records are erased no later than 31 January 2027, after the objection period. Limited evidence of consent and completed draws may be retained longer where necessary to demonstrate compliance with the rules.
Contact lars-gunnar@ethicademocracy.org to request access, correction, erasure, restriction, portability, withdrawal of consent or human review of points and eligibility. AI or automated flags never exclude a participant without a human decision. You may also complain to the Swedish Authority for Privacy Protection.