1. Data needed to run your account (always collected)
Email address, and a password you choose (stored as a salted hash) — or, if you sign in with Google, the email address and name Google shares with us. Used to identify your account, send password-reset and verification emails, and contact you about the tool.
Organisation, if you choose to enter it.
Cooling-load profiles you upload (the CSV files and summary figures) — stored so you can run the model on them; private to you unless an administrator marks one as shared.
A count of your logins and the date of your last login, kept for account security.
This processing is necessary to provide the service you asked for by creating an account.
2. Usage analytics (only with your consent)
To understand how the tool is used — which cities and inputs people explore, how often, and whether features are useful — we would like to record:
Each login: time, sign-in method, IP address and browser user-agent string.
Each model run: time, the load profile used, all input values and the headline results (tank volume, net capex, payback, LCOS, CO₂ avoided).
These records are linked to your account and are visible to the tool's administrators on an analytics dashboard. They are not sold or shared with third parties, and are not used for advertising. You decide: analytics is switched off unless you opt in, and you can switch it off at any time on your profile page — doing so deletes the login events and model runs recorded so far.
3. Cookies and third parties
A session cookie keeps you logged in and a CSRF cookie protects forms. No advertising or tracking cookies are set.
If you use Google sign-in, Google processes your login under its own privacy policy; we receive only your email, name and a Google account identifier.
The sign-up and login forms may use Cloudflare Turnstile to block bots; Cloudflare receives your IP address and browser details for that check.
4. Retention and your rights
Account data and uploaded profiles are kept while your account exists. Deleting a profile removes its file; deleting your account removes everything linked to it.
You can view and correct your organisation and email on your profile page, download your uploaded files from the tool, and withdraw analytics consent at any time.
