Privacy

Your usage file

When you drop a file onto this page, it is read by code running inside your browser tab. The analysis is performed locally, the results are drawn on the page you are already looking at, and nothing derived from your file is transmitted anywhere.

The file is held in your browser's memory for as long as the tab is open. It is not written to disk by this site, not stored in cookies or local storage, and not retained after you close or reload the tab. Reloading the page discards everything; there is no history and nothing to delete.

You do not have to take this on trust. The site is a static page with no backend — open your browser's network tab while you analyse a file and you will see that no request carries your data, or read the page source, which is public.

What the page does request from other companies

Being honest about this matters more than the marketing line. The page itself is static, but loading it does cause your browser to make requests to two third parties. Neither carries any part of your usage file or your results — they serve the page and the analysis code — but each necessarily sees your IP address, as any web request does.

Typefaces are served from this site, not from Google. A font hosted elsewhere would report your IP address to that company on every single page view, which would sit badly beside the promise at the top of this page, so the font files are stored here instead.

GitHub (site hosting)

This site is served by GitHub Pages. GitHub receives the ordinary web-server information that hosting requires, including your IP address and browser user-agent, and applies its own privacy policy to it. This happens for every page on this site.

jsDelivr (the analysis engine)

The analysis engine is real Python compiled to WebAssembly, downloaded from the jsDelivr open-source CDN (cdn.jsdelivr.net). It is fetched only when you actually analyse a file, is about 10 MB, and is then cached by your browser. jsDelivr sees your IP address and the fact that a download occurred. It does not receive your file, any part of it, or any result — the download is one-way, and it happens identically no matter what your file contains.

What is not collected

• No accounts, sign-ups, email addresses or passwords.
• No cookies, local storage, session storage or fingerprinting.
• No analytics, telemetry, error reporting, advertising or third-party trackers.
• No copy of your usage file, your meter readings, or any figure computed from them.
• No full account number, address or name. See below for exactly what the parser does keep, because “discards everything identifying” would be too strong a claim to make.

What the parser keeps from your file, exactly

A utility export opens with a preamble naming you: your name, service address, account number and meter number. The parser reads that preamble and keeps a deliberately reduced part of it — not nothing, and it would be easy to overclaim here, so here is the whole list:

• The last four digits of the account number, so that two files can be told apart. The full number is never retained.
• The five-digit ZIP, and no other part of the address. California baseline allowances depend on climate zone, so the ZIP is the one piece of location that changes the arithmetic.
• The service identifier and the name of the file you dropped.

Everything else in that preamble — your name, your street address, your meter number — is dropped and never stored. The results object this page builds and draws on screen carries none of the four items above except the filename.

All of it stays in the tab either way: none of it is transmitted, because there is nowhere to transmit it to. These lines are in src/greenbutton/_common.py if you would rather read them than take this page's word for it.

Who runs this

A personal project by Cameron Gordon, written and run from California. There is no company behind it, no team with access, no analytics vendor and no data processor, because there is no data to process — the arithmetic happens in your tab.

Your California privacy rights

California's privacy law (the CCPA, as amended by the CPRA) gives you rights over personal information a business collects about you: to know what it holds, to have it deleted or corrected, and to opt out of its sale or sharing. This site collects none, sells none and shares none.

So the honest answer is not “we honour your requests” — it is that those rights have nothing here to attach to. There is no record of you to disclose, nothing to delete, and no sale or sharing to opt out of. What GitHub and jsDelivr see when they serve you a file is theirs, under their own policies, and any request about that is one you would make to them.

Do Not Track and Global Privacy Control

Both are signals your browser can send asking a site not to track you. This site does no tracking to switch off — no cookies, no storage, no analytics, no profile — so the signals change nothing here. That is not a refusal to respect them; there is genuinely nothing for them to act on.

How long anything is kept

Nothing this site controls is kept at all. Your file and everything derived from it live in the tab's memory until you close or reload it, and then they are gone; there is no export, no backup and no cache of results. The ordinary web-server logs GitHub keeps for hosting are subject to GitHub's own retention, which is outside this project's control and is the same for every page on the site.

Children

This is a tool for utility bill-payers and is not directed at children.

If this ever changes

If the project later adds anything that transmits your data — an optional report by email, say, or a hosted comparison — it will be opt-in, described here before it ships, and announced in the public repository. The commit history of this page is itself public, so changes to this policy are auditable rather than merely promised.

Contact

Questions, corrections, or a privacy problem to report: open an issue at github.com/CameronGordonn/energy-advisor/issues.

Terms of use →