Privacy Policy

Who We Are

This website (footycalc.com, "FootyCalc", "we", "us") is operated by Richard Taylor, a sole proprietor based at 1191 Aspen Blvd, Juneau, AK 99801, United States. For the purposes of the EU GDPR, Richard Taylor is the data controller for the small amount of personal data processed through this site.

Summary

• We do not collect, store, or transmit the measurements you enter into any calculator.
• Advertising runs through Google AdSense and is loaded only after you click Accept.
• Our host, Cloudflare, logs ordinary web requests and injects one performance beacon that our consent banner does not control. That is disclosed here rather than buried, because a policy that omits it would be inaccurate.
• You can reset your consent at any time in the Cookie Policy.
• Under GDPR and CCPA you can request access, correction, or deletion — though in practice there is very little personal data for us to produce, which is stated below.

The Three Parties That Touch Your Data

Information You Give Us

If you contact us by email, we receive your name, email address, and the content of your message, and use it only to reply. Our contact form has no server behind it: it hands the fields to your own mail client as a drafted message, so nothing is transmitted to us unless you actually send the email.

Information Collected Automatically

Requests to this site pass through Cloudflare's network, which — like essentially every web host — records standard request metadata (IP address, system configuration information, the URL requested, referrer, timestamp) in log files. We do not run our own analytics database, we do not export those logs to a data warehouse, and we do not have the ability to tell you a precise, contractual retention period for infrastructure logs we do not administer: the retention that applies is whatever Cloudflare applies as a processor under its own policy, linked below. Earlier versions of this page stated "30 days" here. We could not verify that figure against Cloudflare's documentation, so we removed it rather than repeat a number we cannot support.

What we can tell you concretely, because we measured it on our own live pages on October 9, 2026: our HTML responses set no Set-Cookie header, document.cookie is empty on our pages before you accept anything, and the only third-party script injected into every response is the Cloudflare beacon — present even on a URL that returns a 404, which is how we know it is added by the edge and not by our build.

Measurements and Calculator Inputs

Every calculation runs locally in your browser via JavaScript. The numbers you type never leave your device and are not transmitted to our servers or to any third party. There is no calculation history, no saved session, and no user database — which also means a deletion request from us will typically return "we hold nothing to delete". That is the point of the design.

Cookies & Similar Technologies

The complete list — our single localStorage key, Google's cookie names with their published lifetimes, and the non-cookie mechanisms — is in the Cookie Policy. Until you make a choice, the AdSense script does not load; if you click Decline, it stays unloaded for that browser until you reset the choice.

Data Sharing

We do not sell or rent personal information, and we do not share it with advertisers. Two narrow exceptions exist by the nature of running a site: our hosting provider processes request metadata as a processor, and we may be compelled to disclose what little we hold by a valid legal order. We do not use a consent management platform or advertising framework that would pass your data to a broader vendor list — there is nothing to configure there, which is why we do not claim a TCF or Consent Mode certification we do not have.

International Users & Data Transfers

Cloudflare distributes requests across its global network, so the data center that handles your request is chosen by routing rather than by your consent. Cloudflare states that RUM data "does not use location services" and "may be processed in a different country or region from where it originated", and that the IP address is discarded at the nearest data center instead of being stored in its core databases or logs. Google AdSense operates globally under its own transfer framework and standard contractual clauses.

Your Rights (GDPR / CCPA)

If you are in the European Economic Area, the United Kingdom, or California, you have the following rights:

• Right to access any personal data we hold about you.
• Right to rectification of inaccurate data.
• Right to erasure (the right to be forgotten).
• Right to object to processing, or to withdraw consent.
• Right to data portability (a copy in machine-readable format).
• Right to opt out of the sale or sharing of personal information under the CCPA — note that we do not sell it, and we do not operate a "Do Not Sell" link because there is no sale or sharing to opt out of; the functional equivalent on this site is the Decline button, which prevents the ad script from loading at all.

To exercise any of these, email [email protected] or write to the address below. We aim to respond within 30 days. Expect a short reply: for calculator activity there is no record to produce, because none is created.

Children's Privacy

This website is a measurement tool for adults doing home projects; it is not directed at children under 13 (COPPA) or 16 (GDPR), and we do not knowingly collect information from children.

How We Secure What We Do Hold

Practically, security here means "there is almost nothing to breach". What exists is protected as follows: HTTPS only, with HSTS (max-age=31536000; includeSubDomains; preload) on every response; no user accounts, so no credential store; no database, so no injection surface for visitor data; and scripts served from our own origin with nosniff. We treat the definition of personal data as the federal guidance does — information about an individual that can be linked or traced to them (NIST SP 800-122) — and design the site so that the only such item in our hands is an email you send us.

Changes to This Policy

If we change this policy materially, we update the date at the top of this page. We do not promise email notice, because we hold no email addresses to send it to unless you have written to us.

Worked Example: One Page Load, Traced End to End

Suppose you open /square-footage-calculator/, type 12 and 12, see 144.00, and close the tab without touching the banner. Here is the complete record of what left your device, verified against our own pages on October 9, 2026:

1. 1 HTTP request to footycalc.com, handled by Cloudflare's edge. Metadata logged by the host as described above.
2. 0 requests containing your numbers. The arithmetic runs in js/calc-core.js; the Network panel stays quiet while you type. 144.00 = 12 × 12 exists only in your browser's memory.
3. 0 advertising requests — consent is still unset, so the AdSense script is never fetched. We measured this directly: with consent unset, requests go to one host only (our own).
4. 1 beacon request to our own domain's /cdn-cgi/rum endpoint carrying page-performance metrics. No cookies or storage are read by it, per the vendor's documentation quoted above.
5. 1 localStorage write at most, and only if you click a button. In this scenario you clicked none, so sfc_cookie_consent_v1 remains unset and the banner will ask again next visit.

Net: 3 identifiable participants (you, our host, and — only if you accept — Google), and in the no-click scenario Google is not one of them.

Contact Us

Questions about this policy? Email [email protected] or see our contact page. Postal correspondence may be sent to:

Sources and How to Check This Page

• Cloudflare — Privacy Policy. What our hosting provider says it collects and logs on our behalf.
• Cloudflare — RUM beacon for Web Analytics. The beacon's data fields, the statement that it accesses no cookies or storage, and the IP-discarded-at-the-nearest-data-center wording quoted above.
• Google — Advertising technologies. What Google receives for an ad request, including that it may use the IP address to derive general location.
• California Attorney General — CCPA FAQ for consumers (.gov). The consumer rights we enumerate above, including the "Do Not Sell or Share" framing we explain rather than implement as a link.
• NIST SP 800-122 — Guide to Protecting the Confidentiality of Personally Identifiable Information (.gov). The definition of personal data we apply when deciding what counts as disclosure-worthy here.
• Our own live responses, which are the easiest source to audit: request any page with curl -I and check for the absence of Set-Cookie and the presence of the HSTS header; open /ads.txt to match the publisher ID quoted in this policy.