Privacy policy

Last updated 8 October 2026

This policy explains what information Lekker Sun collects when you use lekkersun.tech, why, where it goes and what you can do about it. We keep it to what the service needs to work.

Who we are

Lekker Sun is a sole proprietorship based in South Africa, run by its owner. We work online and answer by email. Our information officer under South Africa's Protection of Personal Information Act (POPIA) is the owner. For anything about your information, write to hello@lekkersun.tech.

Using the designer without an account

Your project (equipment, the objects you place on the map, usage and tariff figures) is kept in your own browser's storage. We do not receive it until you ask for a calculation.

When you click Simulate year or Calculate savings & ROI, the design is sent to our server so the calculation can run there. The latest simulation result is kept with your browser session on our server so repeat calculations are faster, and is deleted when the session expires, at most 30 days after your last visit.

Services your browser or our server contacts

• Maps are loaded by your browser from Esri (United States) for satellite imagery and labels, or from OpenStreetMap (United Kingdom) if you choose the street map. They receive your IP address and the area of the map you are viewing.
• Your location: if you allow it, your browser tells the designer where you are so it can open the map there. This stays in your browser. It only reaches our server if you keep it as a project's site and run a calculation.
• Address search sends the address you type, from your browser, to OpenStreetMap Nominatim, run by the OpenStreetMap Foundation (United Kingdom).
• Advertising: our public pages, and the designer for visitors who are not on a paid plan, load ads from Google AdSense (Google Ireland and Google LLC). Google receives your IP address, the page you are on and information from its cookies. See Ads below.
• Climate data: when you click Fetch climate, our server sends the site's coordinates to NASA POWER (United States) and, if that fails, to PVGIS of the European Commission (European Union). No personal details are sent with them.

These providers handle the requests under their own privacy policies. Apart from Google's ad script, fonts and scripts are served from our own server.

If you create an account

We store your email address, a one-way hash of your password (never the password itself), when the account was created and when you last signed in, and the projects you save with their contents. Saved projects can include a site's location and a household's or business's electricity usage. If you design for clients, make sure you are allowed to store their information here.

Accounts come with a paid plan, so we also store your plan and until when it is paid. If you add branding for your reports, we store the company name, contact line and logo you upload, and show them only on your own reports.

We use your email address only to sign you in and to send a password reset link when you ask for one. We do not send newsletters or marketing, and we do not sell or share your information.

Security records

To stop password guessing and abuse, we keep short-lived counters of sign-in attempts, sign-ups, reset requests and calculations. They are stored under a one-way hash of your IP address or email address and deleted within 24 hours. Password reset links are stored as a hash and expire after one hour. Our hosting provider keeps standard web server logs, including IP addresses, for a limited period.

Contact form

Messages from the contact form (your name, email address and message) are emailed to us so we can reply. We keep them only as long as we need to deal with your request.

Plans waitlist

If you join the waitlist on the pricing page, we store your email address and the plan you are interested in, and use them only to tell you once when paid plans open. To be removed, write to hello@lekkersun.tech.

Payments

Paid plans are not on sale yet. When they are, payments will be handled by a payment provider, and we will update this policy to name them before we take any payment. We will never see or store your full card number.

Ads

The free plan is paid for by ads served by Google AdSense. Google, as a third-party vendor, uses cookies to serve ads based on your earlier visits to this website and other websites. Google's advertising cookies let it and its partners show you ads based on those visits.

You can turn off personalised ads in Google's Ad Settings, or opt out of many third-party vendors at aboutads.info. Google explains how it uses information from sites that show its ads at policies.google.com/technologies/partner-sites.

Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent before personalised ads are shown. Pro and Business accounts see no ads in the designer.

Ad blockers

On the free plan, the designer can check in your browser whether an ad blocker stops Google's ad script or hides a small test element. If so, it asks you to allow ads on this site. The result of this check is not sent to us or stored. Pro and Business accounts are not checked.

Cookies and browser storage

We set one cookie ourselves, lsid, which keeps your session and protects forms against forgery. It is strictly necessary for the site to work. Google sets advertising cookies on pages that show ads, as described under Ads. We use no analytics cookies. The designer also uses your browser's local storage to keep your current project on your device.

Why we use your information

We process your information to provide the service you asked for (running calculations, keeping your account and saved projects). We show ads, and keep the security records, because we have a legitimate interest in funding the free plan and keeping the service safe. Personalised ads are shown only where you have agreed to them, or where the law does not require that consent. This is in line with South Africa's Protection of Personal Information Act (POPIA) and, where it applies to you, the EU and UK General Data Protection Regulation (GDPR).

Where it is stored and for how long

Our server and database are hosted by Afrihost in South Africa. Account details and saved projects are kept until you delete them or delete your account. Deleting your account removes it and every project saved in it from our database straight away. Copies in our hosting provider's backups are replaced in their normal backup cycle.

Your rights

You can:

• download a copy of your account details and all saved projects (Account, then Download my data, in the designer)
• change your password or delete your account at any time from the same place
• ask us to correct information, tell you what we hold, or stop processing it, by writing to hello@lekkersun.tech

If you are not happy with how we handle your information, you can complain to the Information Regulator in South Africa, or to the data protection authority where you live.

Children

Lekker Sun is meant for people aged 18 and over. We do not knowingly collect information from children.

Changes

If we change this policy we will update the date at the top. If a change affects what we do with information we already hold, we will tell account holders by email first.