Privacy

Analytics

We use four analytics services to see which pages and features get used: Google Analytics, PostHog, umami and Cloudflare Web Analytics. PostHog and umami load through heatpump.blue’s own address.

• They record page views, your browser and device type, the page that sent you here, and an approximate location derived from your IP address.
• They also record these events: the tool being started, a result being shown (its kind and confidence), the compare tool being used, a link being shared, a result being saved, and a visit request being sent. Events never include your name, email, phone number, ZIP code or address.
• Google Analytics sets cookies whose names start with _ga. PostHog keeps a random visitor ID in a cookie and in your browser’s local storage. umami and Cloudflare Web Analytics do not set cookies.
• Ad blockers and privacy settings in your browser can stop any of these from loading. The tool still works.

What you enter in the tool

Your ZIP code, heat pump model, home details and energy prices are sent to our server to calculate your result. To find your model’s cold-weather performance, our server looks up the model number at rebate.blue, a sister .blue site. Your result’s link carries those same inputs, so anyone you give the link to sees the same result.

Our server and Cloudflare, which sits in front of it, keep standard request logs: IP address, the address requested and browser type.

If you upload a utility bill (PDF), it is read in memory to fill in the form and is not stored or logged — only the numbers it found (usage and rates) are used.

Share links and saved results

• A short share link (heatpump.blue/s/…) stores your tool inputs in our database so the link can open your result. It holds no name, email, phone number or address.
• If you’re a UniColorado Heating & Cooling customer, the link in their email (heatpump.blue/o/…) works the same way: it is made from your ZIP code, the equipment they installed and your thermostat setting, and holds no name, email, phone number or address.
• We keep dated copies of this database on the same server, so links still open after a fault. The newest 30 are kept.
• Signing in is optional. Sign-in is handled by Plenum’s sign-in service, which can share your account ID, name, email and phone number with heatpump.blue. If you save a result, we store it against your account ID.

Asking UniColorado for a visit

When your ZIP code is in the Colorado area that UniColorado Heating & Cooling serves, your result offers a form to ask for a visit. If you send it, we pass your name, email, phone number (if given), ZIP code, message (if given), your result’s link and the PostHog visitor ID to UniColorado Heating & Cooling, a sister company in UniCo Group, through the Plenum software it uses to manage customers. It uses them to contact you about the request. If that delivery fails, the request is kept on our server so it isn’t lost.

Cookies and browser storage

• hb_session: keeps you signed in, for up to 30 days. Set only if you sign in.
• hb_oidc: holds the state of a sign-in while it is in progress, then is deleted.
• The analytics cookies listed above.
• Local storage keeps your light or dark mode and contrast choice, and whether you turned on Tech mode. In Tech mode it also remembers your last thermostat and rate choice.

Questions or requests

To ask what we hold about you, or to have it deleted, email [email protected].