Privacy policy

What we read and what we store

When you start a test, our server transiently reads the connecting IP address only to derive your carrier (ASN and organization name) and approximate location (region and city) via Cloudflare's infrastructure. That IP address is never written to any log, database, or analytics system.

The only fields stored after each completed test are:

1. Carrier (ISP), normalized from the ASN.
2. Approximate location: region and city (never postal code).
3. Device type (mobile, tablet, or desktop).
4. Device family (e.g. "iPhone" or "Pixel 8"), never the full user-agent string.
5. Test results: download, upload, latency, jitter, and loaded latency.

We also store non-personal technical metadata: a timestamp truncated to the hour, the Cloudflare colo that served the test, the network protocol, and the measurement engine version.

Legal basis

Processing is based on legitimate interest (GDPR Art. 6.1.f) in producing anonymized, aggregated connectivity statistics about broadband quality in Spain.

Anonymization

Because stored rows contain no direct identifiers and the IP is always discarded, we treat rows as pseudonymous at worst. To keep any published statistic fully anonymous, we apply:

• Timestamps truncated to the hour, never the second.
• Location capped at region and city, never postal code.
• Device family only, never the full user-agent string.
• Published aggregates only for (carrier × region) cells with at least 50 samples, always as medians or percentiles — never individual rows.

Retention

Individual rows are automatically deleted after 24 months via a scheduled process. Aggregated statistics (by carrier/region) are kept indefinitely, since they are anonymous by design.

Your rights

You have the right to access, rectify, erase, restrict, and object to the processing of your data, as well as to portability, under GDPR and Spain's Organic Law 3/2018 (LOPDGDD). Honest caveat: because stored rows contain no direct identifiers, we cannot link a specific row back to a specific person, so erasure requests can't target a specific individual result. You can reach us via the about page, and you have the right to complain to Spain's data protection authority, the AEPD.

Analytics

We use the Cloudflare Web Analytics beacon, which uses no cookies or client identifiers and does not permit fingerprinting. It's the sole exception to our zero-third-party-request policy — see the cookie policy for the detail of this exception.