cbg-sim
LearnCalculator

Privacy

Last updated 19 August 2026

cbg-sim is run by ClimateWise. You can use the whole simulator — build a plant, run it, read everything in Learn — without an account and without telling us who you are. This page says what is collected when you do give us something, why, and how to get it back or get rid of it. Questions and requests go to hello@climatewise.today.

What we collect

Account
Your email address, and a password held by our authentication provider as a hash — we never see it. Sign-in through a provider returns your email and a user id, nothing else.
Only if you create an account.
Plants you save
The plant name, its configuration, and the results of the model. This is your work; it is stored so you can come back to it and so a share link resolves.
Only if you save or share.
Things you send us
Site or add-on requests (district, state and any note you write), and corrections you report against a Learn entry (which entry, what kind of problem, your description). Corrections may be sent anonymously.
Only if you submit one.
Questions to the ask bar
Your question is sent to Anthropic's API to be answered against our own reviewed material. It is not written to our database and it is not attached to your account.
Only if you ask something.
Model runs
A row recording a plant configuration that was simulated, with a random session hash rather than an identity, so we can see which shapes of plant people build.
Automatic, and not linked to you.
Measurement
Page views, referrer, approximate location from IP, device and browser, and anonymised session replays of how controls are used.
Only if you allow it. Nothing loads until you answer.

We do not collect special-category data, we do not buy data about you from anybody, and we do not sell or rent what we hold to anyone.

Why we are allowed to hold it

  • To give you the service. An account and the plants in it exist because you asked for them. Under the GDPR this is performance of a contract; under India’s DPDP Act it is the purpose you gave the data for.
  • Legitimate interests. Keeping the service up, stopping abuse, and understanding in aggregate which material is worth writing more of. We use the least identifying option available for each — which is why model runs carry a session hash and not a user id.
  • Consent for measurement. Google Analytics, Clarity and PostHog are not loaded at all until you allow them, and you can withdraw that at cookie preferences as easily as you gave it — which switches the tags off, clears their cookies and reloads the page without them.

Who else processes it

Each of these is a processor acting on our instructions, under their own terms and security commitments. Data may be processed outside India and outside the EEA — chiefly in the United States and the EU — under the transfer terms in their agreements.

Supabase
Authentication and the Postgres database your plants live in.
Anthropic
Answers the ask bar and drafts a plant from a description. Under their API terms, what is sent is not used to train models.
Our hosting provider
Serves the app and keeps short-lived server logs.
Google, Microsoft, PostHog
Measurement — see the Cookies page for exactly what each one does and how to opt out.

How long it is kept

  • Account and saved plants: until you delete them or ask us to close the account.
  • Requests and reported corrections: kept as a record of what was said, and when.
  • Model runs: kept in aggregate; they carry no identity to expire.
  • Measurement: 14 months in Google Analytics, 30 days of Clarity recordings, and the browser lifetimes listed on the Cookies page.

What you can ask for

A copy of what we hold, a correction, deletion, a machine-readable export, or an objection to measurement. Write to hello@climatewise.today and we will answer within 30 days. If you are in the EU or UK you may also complain to your supervisory authority; in India, to the Data Protection Board once it is constituted. Deleting your account removes the account and the plants saved under it.

Security, and one thing to be clear about

Access to the database is restricted by row-level policies and by owner checks in the application, connections are encrypted, and the app is served over HTTPS. But a plant you share by link is readable by anyone who has that link — that is what the link is for. Do not put anything confidential in a plant name or a note you intend to share.

Children

cbg-sim is not directed at children and we do not knowingly collect data from anyone under 18. If you believe a child has created an account, write to us and we will remove it.

Changes

If this notice changes materially we will update the date at the top and say what changed. The current version was last reviewed on 19 August 2026.

See also Cookies for the per-tag detail, and About for who we are.