Privacy, in plain language.

This operational notice describes the current application. The site owner must add its legal identity, jurisdiction, and contact details before treating it as a finalized jurisdiction-specific policy. Last updated: 22 October 2026.

Test data

We receive test requests and the data needed to serve them. Binary upload payloads are read and discarded, never permanently stored. Anonymous test records contain a random test identifier, completion status, speed and HTTP latency measurements, time, and coarse browser/device categories. They contain no visitor password, account, precise location, router information, or stored raw IP address.

Your connection panel

We return your public IP address to your browser and match it locally to a network owner and ASN using a private copy of the public IPtoASN database. Visitor IPs are not sent to a lookup service or added to stored test summaries, browser history results, or shared reports. The connection response is private and must not be cached. VPNs and proxies can change the network shown.

Local history and preferences

Your browser stores recent test results, theme preference, and deletion credentials for reports you explicitly share. Clear history in the History tab or clear this site’s browser storage. Clearing browser storage removes your ability to use locally held deletion keys; reports will still expire.

Anonymous statistics

When enabled by the owner, the application counts page requests by day and public path and aggregates test starts, completions, and endpoint errors. These are page views, not unique people. It does not create a cross-site identifier. Page-view recording honors Do Not Track and Global Privacy Control. Browser/device summaries come from completed tests. Country statistics are unavailable because no geolocation service is configured.

Abuse prevention and infrastructure logs

Short-lived keyed hashes derived from request IP addresses enforce rate limits. They expire from the application cache. The hosting provider and web server may separately process IP addresses and access logs under their own retention and security practices. The site owner is responsible for configuring those logs and reviewing hosting terms.

Optional reports

Selecting Create share link stores only the displayed test metrics and coarse device/browser categories in a randomly addressed report. Anyone with the link can view it until deletion or expiry. Reports are excluded from indexing instructions, but the link is not a password. The default expiration is seven days, adjustable by the owner. Use the Delete control in your current report or History tab to delete it sooner.

Retention

Anonymous test records and aggregate application events are retained for 30 days by default; shared reports for seven days. The owner may adjust these limits. Cleanup runs on the first public page request each day, with manual cleanup available to the owner. A scheduled daily task is recommended for removal at a predictable time even when the site is quiet. Expired shared links stop working immediately even before cleanup. Cleanup of application log files follows the owner’s configured limit.

Cookies and external services

Laravel uses essential session and CSRF cookies for administrator authentication and request security. No advertising or cross-site analytics integration is enabled. Optional external test infrastructure receives test requests if the owner configures it; its hosting policies must be reviewed before use. We do not sell visitor data.

Your choices and contact

You can use the test without an account, clear local results, decline to share, and delete reports for which you hold the deletion key. For other privacy questions, see the contact page. The owner must complete contact information and assess any additional notice or consent requirements that apply to its audience.

Security event logs

We keep administrator sign-in and account-security events for up to 14 days to help investigate abuse. These records use pseudonymous source and account identifiers and may identify the signed-in administrator. They do not contain submitted passwords, reset tokens, cookies, or raw network addresses. Hosting-provider access and security logs are managed separately by the provider.

Optional Google Analytics

If the owner configures Google Analytics, public pages ask for your permission before loading the Google tag. Allowing analytics can send page, device and network information to Google and store analytics cookies. Administrator pages and private reports are excluded. Do Not Track and Global Privacy Control signals disable this integration. You can change your choice using Analytics preferences in the footer; choices are remembered for up to 180 days. Rejecting analytics leaves the speed test available. The owner must separately review the data settings of their Google Analytics property.