Privacy Policy
Last updated: May 3, 2026
HardHatCalc("we", "our", "the site") is operated by Dan Dadovic. This policy explains what data we collect, why, and how we handle it.
Analytics (Google Analytics 4)
We use Google Analytics 4 (GA4) to understand how visitors use the site — which pages are visited, how long people spend on them, and which calculators get the most use. GA4 collects:
- Pages visited and time spent
- Device type, browser, and screen size
- Approximate geographic location (country/region level)
- Referral source (how you found the site)
GA4 does not collect your name, email address, or any personally identifiable information.
How we ask for your consent depends on where you are visiting from:
- EU, UK, EEA (Iceland, Liechtenstein, Norway), and Switzerland:we ask for your consent before any analytics scripts load. If you reject, GA4 does not load and no analytics data is collected. You can change your choice at any time using the "Cookie Settings" link in the footer.
- California, Brazil, Colorado, Connecticut, Virginia, and Utah:analytics is enabled by default, but you have the right to opt out under CCPA/CPRA, LGPD, and the relevant US state privacy laws. Use the "Privacy Choices" link in the footer to opt out — your choice is stored locally and honoured on subsequent visits.
- Everywhere else: analytics is enabled by default. You can clear our stored preferences via your browser settings at any time.
Region detection is performed at the network edge using your inbound request headers; we do not store your IP address or location for this purpose.
Browser Storage
We use the following browser storage:
- consent-status(localStorage) — stores your analytics preference (granted or denied) when you make a choice. Persists until you clear it via "Cookie Settings", "Privacy Choices", or your browser's site-data tools.
- unit_pref (cookie) — stores your preferred unit system (imperial/metric). Expires after 1 year.
- GA4 cookies (_ga, _ga_*) — set by Google Analytics only when analytics is enabled (either after you accept, or by default in regions where opt-in is not legally required). Used to distinguish users and sessions. See Google's Privacy Policy.
Contact Form
When you submit the contact form, we collect the information you provide: your message, and optionally your name and email address. This data is sent via Resend (our email delivery provider) to our inbox. We use your contact information only to respond to your message. We do not add you to any mailing list.
Bot Protection (Cloudflare Turnstile)
The contact form uses Cloudflare Turnstile to verify that submissions come from real people, not automated bots. Turnstile may collect technical information about your browser and interaction patterns to make this determination. It does not use traditional CAPTCHAs or track you across websites.
Rate Limiting
We use Upstash Redis to rate-limit contact form submissions (3 per IP address per hour). Your IP address is hashed and stored temporarily for rate-limiting purposes only. It is not used for tracking or analytics.
Advertising
The site does not currently display advertisements. If we add ads in the future, this policy will be updated to disclose what the ad network collects, and ad scripts will be gated behind the same regional consent rules described above.
Your Rights
You have the right to access, correct, or delete any personal data we hold about you. The specific legal basis depends on your jurisdiction:
- EU and EEA visitors: GDPR (Regulation 2016/679) and the ePrivacy Directive
- UK visitors: UK GDPR and the Privacy and Electronic Communications Regulations (PECR)
- Swiss visitors: Federal Act on Data Protection (FADP)
- California visitors: CCPA and CPRA
- Brazilian visitors: LGPD
- Colorado, Connecticut, Virginia, and Utah visitors: respective state privacy laws
You can change your analytics preference at any time using the "Cookie Settings" link (opt-in regions) or the "Privacy Choices" link (opt-out regions) in the footer. To request data access or deletion, contact us via the contact form.
Data Retention
Contact form submissions (emails) are retained in our inbox for as long as needed to respond to your message, then archived or deleted. GA4 data retention is set to 14 months (Google's default), after which it is automatically deleted.
Changes to This Policy
We may update this policy when we add new features or services. The "Last updated" date at the top reflects the most recent change.