Privacy policy
Last updated: May 24, 2026Your answers in the calculator are stored only in your browser and are never sent to us. If you accept cookies we use PostHog (EU region) to understand how the service is used, including session recordings where form inputs are masked. We never sell your data. You can revoke your consent at any time at the bottom of this page.
Data controller
Daniel Gyllensand is the data controller for processing of personal data on lotsad.se. You can reach us at [email protected] with any questions about your data.
What we process and why
Your calculator answers (salary, employment, dates, etc.) are kept only in your browser's sessionStorage so you can move back and forth through the wizard. The data is never sent to our servers — we have no access to it. It disappears when you close the tab.
Analytics via PostHog (only if you accept cookies). When you click Accept we set cookies that let PostHog track how you use the service: which pages you visit, where you click, how you move the mouse, and what you type into form fields (inputs are masked, see below). We use this to improve Lotsa. Legal basis: your consent (Article 6(1)(a) GDPR).
Server logs and correspondence. Our hosting providers (Cloudflare and AWS) log technical details such as IP address, browser, and timestamp for every request, which is necessary to operate the site and protect it from abuse. If you email us we keep the correspondence for as long as needed to answer you. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Cookies and storage
No cookies or other storage are required to use Lotsa. If you decline cookies the service continues to work without us collecting analytics data.
| Name | Type | Purpose | Retention |
|---|---|---|---|
| lotsa.cookie-consent | localStorage | Stores your choice (accepted/declined) so the banner doesn't reappear | Until you revoke your choice or clear the browser |
| lotsa.wizard-tour-seen, lotsa.parental-leave.results-tour-seen | localStorage | Marks that you've seen the tour so it doesn't repeat | Until you clear the browser |
| lotsa.parental-leave.* | sessionStorage | Preserves your answers between wizard steps (never leaves your device) | Until you close the tab |
| ph_*, __ph_opt_* | cookie + localStorage | PostHog's anonymous session id for analytics and session recording (only if you accept cookies) | Up to 12 months |
Session recordings
If you accept cookies, PostHog records your session: mouse movement, clicks, scroll, and what you type into form fields. We use the recordings to see where users get stuck and improve the flow.
To protect your privacy we automatically mask all input fields. That means salary, dates, and any other numbers you type are shown as black blocks in the recording — we can see that you filled a field but not what you wrote. Passwords (we have none) are always masked.
Recordings are kept for 12 months, then automatically deleted.
Third-party processors
We use the following processors:
PostHog (analytics and session recordings) — our data is stored in PostHog's EU region. The parent company PostHog Inc. is US-based; transfers to the US are protected by the EU-US Data Privacy Framework and standard contractual clauses. See PostHog's privacy policy.
Cloudflare (CDN and firewall) — sits in front of the site and logs IP addresses for each request. Cloudflare is DPF-certified. See Cloudflare's privacy policy.
AWS (hosting via Amplify and CloudFront) — the content of lotsad.se is served from AWS. AWS is DPF-certified. See AWS's privacy policy.
ImprovMX (email forwarding) — if you email [email protected] the message is forwarded via ImprovMX to a personal inbox. See ImprovMX's privacy policy.
None of these processors use your data for anything other than what we engage them to do. We never sell your data, to them or anyone else.
International transfers
Cloudflare, AWS, and PostHog are US companies. When your data passes through them it may be transferred to the United States. The transfer is protected by the EU-US Data Privacy Framework and standard contractual clauses.
Your rights
Under GDPR you have the right to:
• know what we process about you (right of access, Article 15)
• have incorrect information rectified (Article 16)
• have your data erased when we no longer have a legal basis to keep it (Article 17)
• restrict or object to the processing (Articles 18 and 21)
• receive your data in a structured format (portability, Article 20)
• withdraw your consent at any time (see next section)
Because we don't collect personal data that identifies you (no account, no name, no email unless you write to us), most of these rights don't apply in practice — we simply don't have your data to hand over. What does exist is your masked session recordings; we can delete those if you contact us.
You always have the right to lodge a complaint with the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), if you believe we're handling your data improperly. File a complaint with IMY.
Revoke consent
You can revoke your consent at any time. It stops PostHog analytics and clears the cookies that were set.
No automated decision-making
Lotsa runs calculations based on your answers (for example, estimated parental benefit per month). The calculations are deterministic and have no legal effect on you — we don't profile you and don't make any automated decisions about you.
Changes to this policy
If we change the policy we'll update the date at the top of the page. For larger changes that affect you, we'll inform you on lotsad.se before the change takes effect.
Contact
For any questions about your data or this policy, email [email protected].