Privacy Policy

Last updated: August 3, 2026

The Handy Calculators ("we", "us", "our") operates thehandycalculators.com (the "Site"). This policy explains what personal data we process, why, on what legal basis, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar laws (CCPA/CPRA, Swiss nFADP).

1. Data controller

The data controller for personal data processed via the Site is The Handy Calculators. You can contact us at any time through our contact page for privacy-related questions, including to exercise the rights described in section 7.

We do not currently have an establishment in the EU and have not appointed an Article 27 representative. EU/EEA residents may still contact us directly using the channels above.

2. What we collect and why

Category	Purpose	Legal basis (GDPR Art. 6)	Retention
Calculator inputs (numbers, dates you type)	Run the calculation in your browser	Not personal data — never leaves your device	Session only
Calculator request form (name of calculator, optional email)	Respond to your suggestion / follow-up	Art. 6(1)(b) — pre-contractual / Art. 6(1)(a) consent for email	Up to 24 months, then deleted
Contact form records (your consent tick, the UTC timestamp of that consent, the site language you used, and the outcome of our validation and spam checks)	Prove that you asked us to reply, and evidence that the message was legitimate	Art. 6(1)(a) — your consent; Art. 6(1)(f) — legitimate interest in abuse prevention; Art. 7(1) — obligation to demonstrate consent	Up to 24 months, then deleted with the message
Server logs (IP address, user-agent, requested URL, timestamp)	Security, abuse prevention, debugging	Art. 6(1)(f) — legitimate interest in keeping the Site secure	Up to 30 days
Anonymous usage events (page views, web vitals)	Performance monitoring and product analytics	Art. 6(1)(f) — legitimate interest; no cross-site tracking	Up to 14 months (aggregated)
Advertising cookies and identifiers (Google AdSense)	Show ads, measure ad performance, optionally personalize ads	Art. 6(1)(a) — your consent (EEA/UK/CH); legitimate interest elsewhere	Per Google's retention; up to 24 months
Account data (email, hashed password) if you sign in	Authenticate admin access	Art. 6(1)(b) — performance of a contract	Until you delete your account

2.1 Contact form: consent, timestamp and validation records

When you submit the form on our contact page, you must tick a consent box before the form can be sent. For every submission we store an accompanying record so we can demonstrate that consent was freely given and that the message passed our anti-abuse checks:

Consent flag and consent text — whether the box was ticked, and the exact wording you agreed to in the language you were shown.
Timestamps — the UTC time your browser submitted the form and the UTC time our server received and stored it.
Site language — the locale of the page you submitted from (en, es, pt or de).
Validation outcomes — whether the form passed field validation, the hidden honeypot check and the minimum time-on-form check, plus the message length, whether an organization was supplied, the reference number shown to you, the form version, and the number of submissions counted against our rate limits.

These records contain no IP address and no browser fingerprint. Rate limiting uses a one-way salted hash of your IP address and email that cannot be reversed back to the original values, and those hashes are kept separately from your message for 24 hours. Consent and validation records are visible only to the site owner, are never used for advertising or profiling, and are deleted together with the underlying message. You can withdraw your consent at any time — see section 7 — and we will delete both the message and its consent record.

3. Cookies and similar technologies

We use a minimal number of cookies. Strictly necessary cookies (e.g. your auth session if you sign in, your locale preference) are set without consent because the Site cannot function without them.

Advertising and measurement cookies set by Google AdSense are loaded only after you give consent through our cookie banner. In the EEA, UK and Switzerland we use Google Funding Choices, a Google-certified Consent Management Platform that implements the IAB Transparency & Consent Framework (TCF v2.2). Until you accept, we run in Google Consent Mode v2 with all advertising and analytics storage set to denied and ads_data_redaction enabled, so any pings that fire carry no identifiers.

3.1 Advertising (Google AdSense)

This Site is supported by display advertising delivered through Google AdSense (publisher ID ca-pub-8203824251708135). Google and its certified advertising partners may use cookies, device identifiers, IP address, approximate location, and browsing activity on this Site to:

serve and render ads (including via the DoubleClick / Google ad cookie);
measure ad performance, frequency-cap, and prevent fraud;
personalize ads based on your prior visits to this and other sites, only where you have given consent (or, outside the EEA/UK/CH, where you have not opted out).

In the EEA, UK and Switzerland, ads are served in non-personalized mode by default and only switch to personalized after you accept through the Google-certified Funding Choices CMP. You can opt out of personalized advertising at any time via Google Ads Settings or the industry pages at aboutads.info/choices and youronlinechoices.eu. Advertising never influences which calculators we publish or the formulas they use — see our editorial policy.

4. Third parties and recipients

Google Ireland Ltd. / Google LLC — AdSense and Funding Choices CMP. Google may act as an independent controller for ad personalization. See Google's privacy policy and Ads Settings.
Lovable Cloud / Supabase — hosting, database, and authentication for any data you submit through the Site.
Cloudflare / hosting CDN — content delivery and DDoS protection.

We do not sell or "share" personal information as those terms are defined under the CCPA/CPRA.

5. International data transfers

Our processors (Google, Supabase, Cloudflare) may process data in the United States or other countries outside the EEA/UK. Where required, transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (2021/914), supplemented by encryption in transit (TLS 1.2+) and at rest. Copies of the safeguards are available on request.

6. Children

The Site is a general-audience product and is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, please contact us and we will delete it.

7. Your rights

If you are in the EEA, UK or Switzerland you have the right to:

Access the personal data we hold about you (Art. 15);
Rectify inaccurate or incomplete data (Art. 16);
Erase your data ("right to be forgotten", Art. 17);
Restrict or object to processing (Arts. 18 & 21), including profiling for personalized ads;
Data portability — receive your data in a machine-readable format (Art. 20);
Withdraw consent at any time, without affecting prior lawful processing (Art. 7(3));
Lodge a complaint with your local supervisory authority — for example the Data Protection Authority in your country, or the UK ICO.

California residents have analogous rights under the CCPA/CPRA (know, delete, correct, opt-out of sale/share, non-discrimination) and may exercise them via the same contact channels. We honor Global Privacy Control (GPC) signals as an opt-out request.

To exercise any right, contact us via the contact page. We respond within 30 days.

8. Security

Data in transit is encrypted with TLS. Stored data lives in databases protected by row-level security and least-privilege access controls. We never store the raw values you type into a calculator.

9. Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects (GDPR Art. 22). Ad personalization performed by Google does not fall into this category.

10. Changes to this policy

We may update this policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the Site for at least 30 days.

11. Contact

Questions, requests, or complaints? Reach us through our contact page.