Privacy
How information flows through HotWaterWise
The calculators do not require an account or profile. They do, however, send submitted calculator data to same-origin API routes for processing. Calculator handoffs can also place submitted values in the page URL. I use Google Analytics for page visits and calculator opening and submission counts, with the choices explained below. Advertising has separate choices, explained below. Your privacy choices and any confirmed calculator zone are remembered in the browser. Hosting services still process requests to deliver and protect the site.
Operator and contact
HotWaterWise is operated by Connor Murphy as an individual. For questions or to report a mistake, email hotwaterwise@gmail.com.
You can also use this address for privacy questions or concerns, including requests about personal information you have sent by email. If you contact Connor, your email address and the information you choose to include are provided through email services so he can respond. Please include only the information needed for your enquiry.
Calculator requests and handoffs
On calculation, the browser sends a first-party POST request to a HotWaterWise/api/.../calculateroute. The reviewed handlers validate the request, calculate the result and return JSON. No deliberate application-database write, account or household profile is present in those routes. That does not mean the request stays only on your device: the hosting and network layers process it and may create operational or security logs.
Links between calculators use query parameters to carry accepted submitted state. These can include household demand, appliance connection answers and contributions, system, tariffs or rates, annual cost, postcode and region. Older links may contain a rooftop-PV answer, which the revised forms ignore. URLs may appear in browser history, bookmarks, screenshots, copied links and hosting request logs; the site sends a no-referrer policy to prevent the browser from forwarding these URLs as referrers. Avoid sharing a calculator URL if you do not want its values shared.
Browser storage
hww_consentis a first-party cookie that remembers your Analytics choice for 180 days. Expired or invalid choices return to the denied default. Older advertising choices are ignored.hww_ad_choiceremembers a new, separate advertising preference for 180 days. An absent, invalid or expired choice does not permit advertising setup. This cookie is not a Google consent string.- Local storage may remember a manually confirmed council and the postcode it belongs to so accepted calculator handoffs do not reuse it for another postcode.
- A theme preference may be stored locally to remember light or dark mode.
Google Analytics and Consent Mode
I use Google Analytics to understand which pages and calculators people use. Analytics uses advanced Consent Mode: all four signals default to denied before configuration. Denied analytics storage prevents new analytics cookies. Existing cookies can remain until they expire or you clear them, but limited cookieless measurement requests can still reach Google. Reject all does not promise to prevent every Google request when measurement is active. Granting Analytics allows analytics storage.
Measurement uses fixed page identifiers and calculator opening and submission events. Custom interactions require Analytics consent and denied interactions are not saved for later transmission. Household answers, demand, rates, costs, postcode, confirmed region, free text and URL parameters are excluded. Page and referrer URLs are replaced with a fixed page identifier and an empty referrer before measurement starts or navigation changes. Google can still process technical information such as IP address, browser details and consent state when its tag is active.
analytics_storageControls whether Google Analytics may use analytics storage.
ad_storageControls advertising storage. Setup scripts can load while ad requests are paused.
ad_user_dataControls consent for sending user data to Google for advertising.
ad_personalizationControls consent for personalised advertising.
Analytics and advertising are independent. The footer’s Privacy choicescontrol changes the site preference; Google supplies any applicable European advertising decision. All four signals start denied. Rejecting or withdrawing Analytics does not disable necessary delivery, security or operational processing.
Google AdSense and site approval
Google AdSense is the site’s intended source of income. Ad requests are paused while Google approval and site checks are completed. Analytics consent does not authorise advertising. Allowing Advertising in Privacy choices permits Google setup scripts on clean homepage and guide visits. Where the European message applies, Google’s consent interface supplies the advertising decision. Elsewhere, the new explicit site preference supplies permission; an inapplicable European message alone does not. Non-personalised ads can still use cookies for frequency limits and reporting. Setup scripts can load and read existing Google cookies while ad requests are paused. Google and its advertising partners may process IP address, browser, device, clean page and consent information. Advertising scripts are excluded from calculator, answer-bearing and Privacy documents and documents with an incoming referrer. The custom site controls are not a Google-certified CMP. Withdrawal cannot recall information already sent.
Hosting and platform processing
Cloudflare hosts the site and processes requests to deliver it and investigate faults. Hosting services may process IP address, request method, URL, timing, response status and security or diagnostic information. Stored Worker invocation logs are enabled and configured to redact query strings. That setting does not establish deletion of earlier records or redaction by every hosting or security service. On this site’s current Workers Free plan, stored Workers Logs have a three-day retention period; other platform data follows its own policies. Worker Logpush, tail consumers and tracing are disabled, and no external Observability Destinations are configured in the reviewed account settings. Google and Cloudflare processing may take place outside Australia under their respective policies.
Your choices and external policies
You can grant, deny or withdraw Analytics through Privacy choices in the footer, or clear site data in your browser. Advertising has a separate switch. Turning it off blocks further setup and reloads a resident advertising document; it does not delete Google’s consent record. Where available, Review Google advertising choices opens Google’s own interface and starts a fresh document after a completed change. On calculators and the Privacy page, open a fresh homepage to use that interface without losing your results. Setup failures can turn Advertising off; you may choose again later. Changing privacy choices does not clear calculator answers or results. Clearing all site data can also clear necessary preferences and confirmed zones. See Google Privacy, Google cookies, and Cloudflare privacy.
Last reviewed: 17 October 2026. See also Terms of use and Disclaimer.