Security and privacy
This is the place where we explain how we handle security and data. What is not stated here can be found in the privacy statement.
Recording as little as possible
From a guest, we record how much electricity they purchase and consume in the property where they are staying, because they settle up for that. We do not ask them for an account or their name; what they purchase, they purchase with a payment and not with a profile.
We retain the answers to the selection tool only to show you the result, and you can have them deleted.
Technology
Everything goes over https with HSTS. Passwords are stored hashed, sessions are in the database, and two-step verification is available via email or sms — available to everyone, and never mandatory.
An encrypted backup is made daily, and that backup is automatically restored in a test — a backup you have never restored is not a backup.
The connection with the module
Each module has its own username and password and communicates over an encrypted connection with our server. The certificate comes from a public issuer; a module refuses the connection if it does not match, and that is intentional: a box that accepts every certificate is a box that talks to everyone.
What a module is allowed to read and write is delimited per module. It only accesses its own messages and nowhere else — not those of a neighboring property and not those of another park. This has been verified by listening in on a second connection, and is not assumed based on what the module itself reports.
Why the power is not switched off from outside
The disconnection when credit is empty happens through the program on the module itself, not through a command from us. That is a deliberate choice: if the connection fails, measurement continues and the billing still works out correctly. A module that is silent is not a module that uses nothing.
It also has a downside that we prefer to name rather than conceal: we cannot switch the power back on remotely if the connection is lost. The circuit for refrigerator and router therefore never falls under the disconnection — it stays on, even with zero credit.
Download everything, always
Via your settings you export all your data with one click as a ZIP file. You can cancel at any time; your invoices remain available as long as the law requires it.