Necessary storage keeps language, location and privacy choices. Optional analytics are not connected in this prototype.
Aggregate planning
Plan from privacy-protected cohorts, opportunity supply and barrier patterns — never individual behaviour or household profiles.
Municipal family-life observatory
Every cohort is k ≥ 10
6Across three age bands
4Below the privacy threshold
8Household-level detail unavailable
verified-workspace-required, publication-action-required
Planning evidence
Workspace overview
Only k ≥ 10
Below privacy threshold
Aggregate fictional signals
No household-level drill-down
Aggregate planning
Aggregate interest exceeds fictional nearby supply in three areas.
Hidden because the fictional cohort contains fewer than ten households.
Compare aggregate demand and published opportunities without personal profiles.
Fictional cohort
Families viewing nature and outdoor opportunities
Interest around Saturday and Sunday
Households requesting more than one supported language
Municipal cells are visible only when at least 10 households contribute. Small cohorts remain suppressed, and no route can drill down to a family.
