Privacy Policy
Last updated: October 31, 2026
HardHatCalc ("we", "our", "the site") is operated by Dan Dadovic. This policy explains what data we collect, why, and how we handle it.
Analytics (Google Analytics 4)
We use Google Analytics 4 (GA4) to understand how visitors use the site — which pages are visited, how long people spend on them, and which calculators get the most use. GA4 collects:
- Pages visited and time spent
- Device type, browser, and screen size
- Approximate geographic location (country/region level)
- Referral source (how you found the site)
GA4 does not collect your name, email address, or any personally identifiable information.
How we ask for your consent depends on where you are visiting from:
- EU, UK, EEA (Iceland, Liechtenstein, Norway), and Switzerland: we ask for your consent before any analytics scripts load. If you reject, GA4 does not load and no analytics data is collected. You can change your choice at any time using the "Cookie Settings" link in the footer.
- California, Brazil, Colorado, Connecticut, Virginia, and Utah: analytics is enabled by default, but you have the right to opt out under CCPA/CPRA, LGPD, and the relevant US state privacy laws. Use the "Privacy Choices" link in the footer to opt out — your choice is stored locally and honoured on subsequent visits.
- Everywhere else: analytics is enabled by default. You can clear our stored preferences via your browser settings at any time.
Region detection is performed at the network edge using your inbound request headers; we do not store your IP address or location for this purpose.
Browser Storage
We use the following browser storage:
- consent-status (localStorage) — stores your analytics preference (granted or denied) when you make a choice. Persists until you clear it via "Cookie Settings", "Privacy Choices", or your browser's site-data tools.
- __consent_posture (cookie): holds the consent posture for your region, set at the edge before you make a choice. Expires after 24 hours.
- GA4 cookies (_ga, _ga_*) — set by Google Analytics only when analytics is enabled (either after you accept, or by default in regions where opt-in is not legally required). Used to distinguish users and sessions. See Google's Privacy Policy.
Contact Form
When you submit the contact form, we collect the information you provide: your message, and optionally your name and email address; the report form under each calculator result also sends that page's address and the result as shown. This data is sent via Brevo (our email delivery service) to our inbox. We use your contact information only to respond to your message. We do not add you to any mailing list.
Bot Protection (Cloudflare Turnstile)
The contact form and the "Report an issue" form under each calculator result use Cloudflare Turnstile to verify that submissions come from real people, not automated bots. Turnstile may collect technical information about your browser and interaction patterns to make this determination. It does not use traditional CAPTCHAs or track you across websites.
Rate Limiting
We use Upstash Redis to rate-limit submissions from the contact form and the "Report an issue" form under each calculator result (3 per IP address per hour, the two forms counted together). Your IP address is hashed and stored temporarily for rate-limiting purposes only. It is not used for tracking or analytics.
Advertising
The site does not currently display advertisements. If we add ads in the future, this policy will be updated to disclose what the ad network collects, and ad scripts will be gated behind the same regional consent rules described above.
Your Rights
You have the right to access, correct, or delete any personal data we hold about you. The specific legal basis depends on your jurisdiction:
- EU and EEA visitors: GDPR (Regulation 2016/679) and the ePrivacy Directive
- UK visitors: UK GDPR and the Privacy and Electronic Communications Regulations (PECR)
- Swiss visitors: Federal Act on Data Protection (FADP)
- California visitors: CCPA and CPRA
- Brazilian visitors: LGPD
- Colorado, Connecticut, Virginia, and Utah visitors: respective state privacy laws
You can change your analytics preference at any time using the "Cookie Settings" link (opt-in regions) or the "Privacy Choices" link (opt-out regions) in the footer. To request data access or deletion, contact us via the contact form.
Data Retention
Contact form and report form submissions (emails; a report also carries the page's address and the result as shown) are retained in our inbox for as long as needed to respond to your message, then archived or deleted. GA4 data retention is set to 14 months, the longer of the two retention periods Google offers (2 or 14 months), after which it is automatically deleted.
Changes to This Policy
We may update this policy when we add new features or services. The "Last updated" date at the top reflects the most recent change.