Privacy Policy - TheSiteMath

Overview

TheSiteMath provides construction calculators and project planning tools. We collect information you choose to submit, essential session data needed to operate an account, and consent-based analytics or advertising data. We do not sell personal information.

Data collected and local data

Calculator and local-save data stays in your browser until you explicitly submit or import it. Optional cloud data can include validated calculator inputs, server results, estimates, prices, project, customer, client, Price Book, brand, logo, version, share, and export metadata. Contact forms may include your name, email, message, and project details.

Accounts and authentication

Google OAuth and Google Identity Services, including account selection and One Tap, and Email OTP are supported. Google may provide an account ID, email, display name, and profile image. Better Auth session records are stored in Cloudflare D1, and Resend sends OTP email. Essential session and rate-limit storage is required for account security.

Cloud projects and storage

Cloudflare Pages and Workers host and process the service; Cloudflare D1 stores structured records and Cloudflare R2 stores assets. R2 assets are served through scoped first-party routes rather than public object URLs. Private project and share pages have no public advertising. Standard public calculators, guides, and blog pages may be ad-supported subject to advertising consent. Project Pass does not grant public-page ad suppression.

After your first cloud project, the account owner may optionally provide a role (contractor, estimator, or homeowner), project type (roof or fence), a monthly quote-volume range, and the current workflow tool. We use these four low-cardinality fields to prioritize product and workflow improvements. We do not collect a free-text response, and you may permanently skip this step. The submitted or skipped record is included in your account data export and is deleted through the existing account-deletion process, subject only to the backup cycles described in this policy.

Payments and billing

Waffo.com Limited (through Waffo Pancake) is the merchant of record and handles checkout, payment, tax, and card details. We do not store raw card data. TheSiteMath receives and uses provider-confirmed transaction or order ID and provider-confirmed order or transaction identifiers, product or plan, amount and currency, status, payment, refund, or cancellation timestamps, and account and billing linkage. We use these facts for access, support, fraud, disputes, tax, audit, reconciliation, and legal purposes. Full card data is not stored.

Cookies, analytics, and ads

Essential storage is always used for sessions, security, and preferences. Region-aware defaults apply to optional signals: US visitors start with analytics and advertising enabled for the current page session unless Global Privacy Control (GPC) is true or the visitor saves different choices; visitors in the EEA, UK, or Switzerland remain denied until an applicable consent signal is received; other or unknown regions use strict denied defaults. GPC is honored as a global opt-out and overrides stored grants for optional analytics and advertising. Saved choices can be changed through Cookie Settings; implicit US defaults are not written to local storage.

When analytics is denied by consent or regional default, the Google Analytics (GA4/Google Analytics) tag may still load in Consent Mode v2 and send cookieless page-view pings; it does not set analytics cookies. Umami, Microsoft Clarity, and custom interaction analytics remain off until analytics is granted. GPC prevents the Google Analytics tag from loading. Google Analytics, Umami, and Microsoft Clarity use the analytics signal. Clarity is independent of the advertising signal. Google AdSense uses the separate advertising signal together with fresh eligibility and entitlement checks. Google Consent Mode v2 communicates the signals for ad_storage, analytics_storage, ad_user_data, and ad_personalization. Consent messaging is provided through applicable Privacy & Messaging settings. Manual ad slots reserve layout space; page- level Auto ads are a separate future test, and no ad fill or revenue is promised. You can withdraw analytics or advertising consent at any time through Cookie Settings.

Retention and deletion

Account deletion immediately revokes ordinary sessions and shares and starts a 30-day recovery period. Content can then be purged. Minimum transaction data may be retained after account deletion. Minimum pseudonymous billing records may remain for tax, disputes, fraud, audit, reconciliation, and legal obligations. Backups may persist through their bounded retention cycle.

Choices and rights

Use Cookie Settings to change analytics and advertising consent. You may keep data local, request access or correction, or request deletion. Contact privacy@thesitemath.com for privacy requests.

Security, international, and children

We use access controls, scoped routes, and reasonable technical safeguards, but no online system is perfectly secure. Providers may process data in countries outside your residence. The service is not directed to children under 13; do not submit their information.

Changes and contact

We may update this policy as the service changes. The updated date identifies the current version. For account or billing questions, contact support@thesitemath.com; for other matters, use the contact page.