Privacy Policy

1. What actually runs on this site

This policy describes what we actually run, not what a template makes it easy to claim. Only four things process data at all:

• Client-side calculators. The BMI, ideal-weight, lean-body-mass, and related calculators do all arithmetic in your browser using JavaScript. Your height, weight, age, and sex inputs are never transmitted from your device to us, and are not stored anywhere on our servers.
• Google Analytics 4 (GA4). We use GA4 to count page views and understand which guides are read. GA4 sets analytics cookies on your device. See Section 4 for cookie detail and Section 5 for how consent is handled.
• Server logs. Our hosting provider records standard HTTP request logs (IP address, user agent, referrer, timestamp, page requested) for operational and security purposes.
• Email contact. If you email info@calculatemybmi.net, your address and the contents of the message are received and kept as long as reasonably needed to reply and, where relevant, to make the correction you reported.

We do not currently serve advertisements on this site. If that changes we will update this policy under Section 10 before advertising code is deployed.

2. What we collect

2.1 Calculator inputs

None. Your calculator inputs are processed in your browser and are not transmitted to us or to any third party. When you close the tab, they are gone.

2.2 Analytics data (Google Analytics 4)

GA4 processes the following categories of data when analytics cookies are set (see Section 5 for consent):

• A pseudonymous client ID stored in a first-party cookie so GA4 can distinguish sessions and returning visitors.
• Page URL, referrer URL, and page title of each page you view.
• Timestamp, approximate location (typically city-level, derived by Google from IP), device type, operating system, browser, and language.
• Basic interaction events (page views, session start / end, engagement time).

GA4 processing is performed by Google LLC and may involve transfer of data to servers outside the EEA. Google’s privacy notice is available at policies.google.com/privacy.

2.3 Server logs

Every HTTP request produces a log line containing your IP address, timestamp, path requested, HTTP status, response size, referrer, and user-agent string. Retention is described in Section 6.

2.4 Email correspondence

If you email us, we receive your email address and message body. We use them only to respond to you.

3. Legal basis for processing (GDPR)

• Analytics cookies (Section 2.2): consent (GDPR Art. 6(1)(a) and, where the ePrivacy Directive applies, Art. 5(3) of that directive). See Section 5.
• Server logs (Section 2.3): legitimate interests (GDPR Art. 6(1)(f)) in operating and securing the site.
• Email correspondence (Section 2.4): legitimate interests in responding to an inquiry you initiated.

4. Cookies in use

This site sets one category of cookie:

• Google Analytics 4 — typically _ga and _ga_<property-id>. First-party. Purpose: distinguish unique visitors and sessions. Set only when analytics consent is granted (see Section 5).

No other cookies are set by this site. In particular, there are no advertising cookies at present.

4.1 How to manage cookies

Your browser settings let you view, delete, and block cookies. To opt out of Google Analytics collection specifically, you can install the Google Analytics Opt-out Browser Add-on.

5. Consent handling

This site uses Google Consent Mode v2, with the following defaults set before Google Analytics loads:

• Visitors detected as being in the EEA, UK, or Switzerland (heuristically, via the timezone reported by your browser): analytics_storage denied by default, until you choose Accept in the consent banner. Ad-related signals (ad_storage, ad_user_data, ad_personalization) are also denied by default.
• Visitors elsewhere: analytics_storage granted by default (matching common practice for outside-EEA visitors). Ad-related signals denied — there is no advertising code to grant them to.

Your choice from the banner is stored in your browser's localStorage. You can change it at any time via the Cookie settings link (also present in the footer of every page). The timezone-based geo detection is a client-side heuristic, not an authoritative geolocation.

6. Retention

• Server logs: typically retained for the period configured by our hosting provider; usually on the order of 30 days.
• Analytics data: retained according to the retention setting configured on the GA4 property in the Google Analytics admin console. GA4 offers 2 or 14 months for user-level and event-level data; the setting in force here is the one selected on the property and can be viewed by the site operator.
• Email correspondence: retained for as long as reasonably needed to resolve the inquiry and for basic record-keeping, typically no more than 12 months.

7. Your rights under the GDPR

If you are in the EEA, UK, or Switzerland, you have the following rights in relation to personal data we process:

• Right of access to know whether we hold personal data about you and to receive a copy.
• Right of rectification to have inaccurate personal data corrected.
• Right of erasure (“right to be forgotten”) subject to the usual exceptions.
• Right of restriction of processing in specified circumstances.
• Right to data portability for data you provided to us that we process by automated means on the basis of consent or contract.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time (in particular for analytics cookies — see Section 5).
• Right to lodge a complaint with your national supervisory authority. In Slovenia (our controller's jurisdiction), the authority is the Informacijski pooblaščenec (Information Commissioner).

To exercise any of these rights, email info@calculatemybmi.net. We aim to respond within 30 days. Because we hold very little personal data about individual visitors, we may need additional information to identify records that relate to you.

8. Your rights under the CCPA / CPRA (California)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you rights over personal information we process about you. These include:

• Right to know what categories and specific pieces of personal information we have collected about you and the purposes.
• Right to delete personal information we have collected from you, subject to exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing of your personal information. We do not sell your personal information for money, and we do not currently share it for cross-context behavioural advertising.
• Right to non-discrimination for exercising your CCPA rights.

Requests: email info@calculatemybmi.net.

9. Third parties

The only third-party processor that receives data from this site is Google LLC, as operator of Google Analytics 4. Google's privacy notice: policies.google.com/privacy.

Our hosting provider processes standard HTTP request logs on our behalf.

10. Changes to this policy

We may update this policy to reflect changes to what runs on the site, changes in law, or clarifications. When we do, we update the “Last updated” date at the top of this page. If a change is material — for example, if new categories of data start being collected or new categories of third parties start receiving data — we will make a reasonable effort to make the change visible on the site before it takes effect.

11. Children's data

The site is not directed at children under the age of 13 (or 16 in the EEA, depending on member state law). We do not knowingly collect personal information from children in these age groups. The pediatric BMI calculator is a tool intended for use by parents, guardians, and healthcare providers — it processes inputs entirely client-side and does not transmit them to us. If you believe personal information from a child has reached us, email info@calculatemybmi.net.

12. Contact

For any question or request regarding this policy or your rights, contact the data controller:

If you are in the EEA and believe our processing infringes your rights, you have the right to lodge a complaint with your national data protection supervisory authority.

See also our terms of service for the general rules of use, and the contact page for a form-based way to reach us.