Privacy policy

Who operates Measure & Make

Measure & Make is an independently operated DIY and home improvement calculator website, currently maintained as a personal project. The website's operator is responsible for the limited information handled by the application. For a privacy question, correction or deletion request, use the contact form and choose Privacy request.

The website is aimed at people in the United Kingdom and United States. The rules applicable to a particular request or visitor can depend on their country and circumstances.

Calculator data and browser storage

Measurements, supplier prices and estimated quantities are calculated in your browser. The project planner saves one named project, line items and notes to your browser's localStorage using the key measuremake:project:v1. Your UK/USA preference is saved under measuremake:market. Neither is automatically uploaded to an application database.

You can clear the project using the planner, remove website storage through browser settings, or export a JSON copy yourself. Files you export or print are under your control. Clearing browser data can permanently remove the project; there is no cloud recovery in this version.

Contact messages

When you submit the Contact form, we receive your name, email address, chosen topic and message. We use these details to read your enquiry, identify relevant calculator problems and reply if needed. The information is stored in a separate Cloudflare D1 database with EU data jurisdiction and is accessible through an owner-only dashboard.

Contact messages are automatically deleted when they are older than 180 days, and the operator can delete them sooner. When a message arrives, the website can send a short email alert to the verified operator address through Cloudflare Email Service. That alert contains only the enquiry topic and a link to the protected inbox, not the visitor's name, email address or message. Failed alerts can be retried. Messages are not sold to advertisers or used for marketing mailing lists. Please do not submit payment details, passwords or sensitive personal information.

To limit automated abuse, the website uses a temporary keyed hash derived from the request's IP address and the current hour. Only the hash and submission count are stored by this application, not the raw IP address. The temporary values are removed by a scheduled clean-up after approximately 48 hours.

Aggregate traffic analytics

We count successful HTML page visits, grouped by UTC date, page URL, approximate country code and referring website hostname. We also estimate the number of distinct visitors within each UTC day, using a keyed daily digest calculated from the request IP address and browser user-agent. The raw IP and user-agent are processed temporarily but are not saved in our analytics database; the pseudonymous daily digest is retained for up to approximately 48 hours to prevent duplicate counting. No analytics cookie or permanent browser identifier is set.

Page views represent pages opened, not individual people. Estimated visitors are deduplicated within a single UTC day, and the sum of daily estimates over a reporting period can count returning people more than once. Shared IP addresses, privacy tools, device changes and network changes can make these estimates inaccurate. Automated visitors may not always be filtered. Aggregated counts are deleted after approximately 365 days; we do not use advertising pixels or third-party behavioural analytics.

Hosting and security

Cloudflare delivers and protects the website. It may process IP addresses, browser information, requests and security events as part of providing network and hosting services; those provider-level logs are separate from the app's aggregated analytics. Cloudflare's own policies and relevant service terms govern this processing.

The owner dashboard is protected using Cloudflare Access authentication, and the application verifies the Access token before returning private messages. The public site does not require a visitor account. Access authentication data for the owner is not the same as customer contact-form data.

Cloudflare's international network may process request and security information outside the country where a visitor is located. Application contact messages are configured in an EU-jurisdiction D1 database, although this does not mean every piece of Cloudflare network data stays exclusively in the EU.

Purposes and legal grounds

In UK data-protection terms, the operator relies on legitimate interests where appropriate for running and protecting a free website, responding to voluntarily submitted enquiries and measuring aggregated page demand. These interests must be balanced against visitors' privacy rights; requests can be raised using the Contact form.

We do not rely on the contact-form checkbox as consent for advertising. The checkbox confirms you have read this policy. If the site later introduces non-essential tracking or advertising technologies, their use will be reviewed and relevant consent or opt-out choices provided before those technologies are activated.

Your rights and choices

Depending on the law applicable to you and the records held, you may request access to, correction of, deletion of or restrictions on personal information, and object to certain processing. You can also contact the UK Information Commissioner's Office if you believe your rights have not been respected.

For contact records, submit a Privacy request through the form using the same email address where practical. We may need enough information to identify the correct message and prevent someone else from requesting another person's data. Since calculations and projects normally remain only on your device, we cannot recover browser-local data that the operator never received.

US privacy rights vary by state and by the applicable law. We do not claim every state law applies to this small personal website. We do not sell user data or offer behavioural advertising.

Changes and contact

This policy reflects the features in use on 8 November 2026. We will update it if the site starts using additional analytics, advertising, third-party embeds, accounts or other features that change how data is processed.

Privacy concerns and requests can be sent through the public Contact form. This website does not presently operate a separate published email address.