Privacy Policy
UK Grid is a free public dashboard for British electricity grid data, operated by Andelle Labs. We don't sell anything, we don't run ads, and we don't track you for marketing. This page is the honest description of what limited data we do process and why.
Who is responsible
The data controller for this site is Andelle Labs (trading name). For privacy questions or to exercise your rights under the UK GDPR, email [email protected].
What data we process
We don't have user accounts, comments, or any form of submission. The data we touch is technical, automatic, and listed below.
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| IP address (in request logs) | Standard server logging by Firebase Hosting and Google Cloud, for security and abuse investigation | Legitimate interest | Up to 30 days (Firebase default) |
reCAPTCHA v3 cookie (_GRECAPTCHA) and signals |
Google reCAPTCHA scores each visit to prevent automated abuse
of our Firestore database. The cookie is set by
google.com when the script loads.
|
Legitimate interest (anti-abuse / fraud prevention) | 6 months (Google-controlled) |
| App Check token (browser storage) | A short-lived token issued by Firebase App Check, stored in your browser's IndexedDB so the dashboard can keep reading live data without re-verifying every request | Legitimate interest | ~1 hour TTL, refreshed automatically |
Theme preference (localStorage) |
Remember whether you chose light or dark mode | Strictly necessary for the feature you chose | Until you clear browser data |
We do not run any analytics product (no Google Analytics, no Mixpanel, no Plausible, no Fathom). We don't fingerprint you. We don't profile you for advertising.
Who we share data with
The site relies on infrastructure operated by third parties. They may process technical data (your IP, your reCAPTCHA score) under their own terms.
-
Google Firebase — hosting, Firestore database,
and App Check service. Region:
europe-west2(London). See Firebase privacy. - Google reCAPTCHA v3 — anti-abuse scoring of every page load. See Google's privacy policy and terms.
- National Grid ESO (NESO), Elexon, and National Grid ESO / Environmental Defense Fund (via Carbon Intensity API) — these are the upstream data sources. We only read from their public APIs; they do not receive any data about you from us.
International transfers
Firebase data is held in the UK (europe-west2, London).
Google reCAPTCHA is a US-based service; Google relies on the EU
Standard Contractual Clauses and the UK Addendum for transfers
outside the UK/EEA.
Cookies
We set no first-party cookies. The only cookie set when you visit
is _GRECAPTCHA by google.com, used for
anti-abuse scoring. The ICO considers anti-fraud cookies as
strictly necessary, so we don't show a consent banner. If you want to block it,
clear cookies for google.com or use your browser's
cookie controls.
Your rights
Under the UK GDPR you have the right to:
- Access — request a copy of any data we hold about you
- Rectify — ask us to correct inaccurate data
- Erase — ask us to delete data
- Restrict or object to processing
- Data portability
- Lodge a complaint with the UK ICO if you believe we've mishandled your data
To exercise any of these, email [email protected]. We aim to respond within 30 days.
Children
The dashboard is information-only and suitable for any age. We don't collect data identifying children specifically or otherwise.
Changes to this policy
We'll update the date at the top whenever this changes. Material changes will be noted in the project changelog on GitHub.
Have a question we didn't answer? Email [email protected].