Privacy, in plain English

Reading, search, and site infrastructure

You can use this site without an account. We do not run display advertising or a newsletter signup. We measure site traffic with Google Analytics, described in the next section. Our own product-event stream is a separate feature and is switched off: the browser does not send tool-completion, search, or reading events to our analytics endpoint while that feature is disabled.

Cloudflare processes requests needed to deliver and protect the site, which can include your IP address, browser information, requested address, and security information. This is separate from a project record or a site analytics profile. See Cloudflare’s privacy policy. We do not claim that visiting a website sends no network information.

Site traffic measurement

Every page on this site loads Google Analytics 4, property G-HW1DG6MMPB. The tag runs in your browser and reports to Google the address you opened, the address that sent you here, your browser and device type, an approximate location worked out from your IP address, and the page interactions the tag counts as events. Google processes that data on our behalf and we read the reports. We use it to see which guides get read and which do not.

The tag stores identifiers in your browser, cookies named _ga and _ga_ followed by the property code, so a second visit is counted as the same browser rather than a new person. You can stop it: block cookies for this site, use a content blocker, or install Google’s own opt-out add-on. Nothing on this site stops working if you do. Google keeps the event data under the retention setting on the property and describes its own handling in how Google uses data when you use our partners’ sites or apps.

Our site code also sends named interaction events to that GA4 property for actions such as using a guide answer, tool, source, or clearly labeled external link. When an incoming address belongs to a controlled list of known AI-assistant hosts, it sends an ai_referral_visit event with the assistant category, referring hostname, and landing-page path. It does not copy the full referring address or its query into that event, and it does not reclassify an unknown or direct visit as AI traffic. This custom event layer stops when the browser exposes Do Not Track or Global Privacy Control; the base Google tag has its own controls described above.

We do not send tool answers, measurements, bid names, notes, email content, or correction text to GA4, and we do not combine analytics with those records. If we connect analytics to advertising or another Google product, this notice will say so first.

For visits explicitly tagged as Adsterra advertising, custom interaction events may include validated campaign, placement, and banner IDs, plus the campaign label. We keep those campaign fields in this tab's session storage for a 30-minute inactivity window so a later product click can be attributed to the advertising placement. They are not a unique person or click ID and contain no planner answers. Another explicitly tagged source or an expired window clears that context; closing the tab clears its session storage. An explicitly chosen internal product comparison may carry the same campaign fields in its address when it opens in a new tab. Choosing to browse products does not open a retailer automatically. This custom tracking respects the opt-out signals described above.

Project answers, calculations, and Project Binder

The project planner, board-foot calculator, contractor comparison, and Project Binder run in your browser. We do not receive the answers, measurements, bid names, notes, or worksheet checks. A tool stores a record only when you turn on local saving or choose “Save to Project Binder.” Those records remain in this browser’s local storage and do not sync to a server or another device. Other people using the same browser profile can access saved records. Browser cleanup or private browsing may remove them; download a copy if you need to keep one. Switching the site language does not create a separate private storage area. Use the tool’s clear action, or clear site data in your browser, to remove them. Printing and downloading create files or output on your device.

Search URLs and privacy

Search runs in your browser against our downloaded site index. Search text is not submitted to a search service. New searches stay out of the address bar. If you open an older or shared link containing ?q=, that initial address is sent to our hosting provider and may already appear in browser history or infrastructure logs. We read it to restore your search and remove it from the displayed address. Our no-referrer policy prevents that page address from being included in subsequent Referer headers. Do not enter private project or personal information in search.

Embedded YouTube videos

Selected guides include YouTube’s privacy-enhanced player, served from youtube-nocookie.com. The player loads lazily as it approaches the visible part of the page; it can contact YouTube before you press play. YouTube receives network and browser information needed to load and play the video. The player request includes this site’s origin, but not the guide path or query, as its Referer header. Privacy-enhanced mode does not mean that no information is sent. See YouTube’s embed explanation and Google’s privacy policy. The written guide remains available if you block the player.

Links to other websites

Source links, product-research links to Best Spray Foam, and direct Amazon or Walmart links open another website with its own privacy practices. A store receives the request when you follow its link. Eligible Amazon product links carry the Spray Foam Guides Associates tracking ID, which tells Amazon that the visit came through this publication; a visible affiliate disclosure appears before each affected product section. Walmart links are currently ordinary store links without our affiliate identifier. Spray Foam Guides and Best Spray Foam share ownership, but no account, profile, personal answer history, or uploaded file is transferred by our editorial links.

Email correspondence

Messages sent to [email protected] are delivered to the publication’s Hostinger-hosted mailbox. We use the sender address, subject, message, and any voluntarily supplied information to assess and respond to the inquiry. Email content is not copied into site analytics. Do not send passwords, payment information, health records, a home address, or urgent safety information.

Routine correspondence is kept only while it is needed for the inquiry and normal publication records. Evidence supporting a material correction, rights decision, or editorial disclosure may be retained with that record. You may request deletion of ordinary correspondence by emailing the same address, subject to records we must retain for security, legal, or editorial accountability.

Public correction reports

The correction form opens a public GitHub repository. A submitted report and its GitHub account name are public under GitHub’s privacy terms. Do not include personal, medical, address, credential, or private project information. Use the publication email for evidence that should not be public. The site does not copy correction-form text into analytics.

Question form and publication permission

The Research Desk form, when available, sends your email address, question, chosen topic, optional project context and state/country, linked guide, and publication preference to our Cloudflare-hosted endpoint. Hostinger sends the message to our publication mailbox and keeps a sent copy. The correspondence rules above apply to those copies. We do not use a separate form service, save questions in a website database or browser storage, or send these fields to analytics. If sending is unavailable, the page says so.

Cloudflare Turnstile checks network and browser signals to help prevent automated submissions. Our server validates its token before sending. To slow repeated attempts, a private Cloudflare cache holds short-lived counters under keyed hashes of your network address and reply email, rather than those original values. Our form code does not log message bodies. Cloudflare still processes infrastructure and security information under its privacy policy; see also the Turnstile privacy notice.

A question is private by default. The optional checkbox allows us to contact you about an edited, anonymous version; it is not permission to publish immediately or add you to a mailing list. We ask you to approve the proposed public text separately and keep that approval with the editorial record. Use Clear fields to remove your text from the page. A success message confirms acceptance by our mail service, not that an editor has read the message. Browser restoration features may retain form values.

Changes to this notice

If we add another commercial tracker, message service, or new storage, we will update this notice to describe what the feature actually does. Last updated: October 19, 2026.