Privacy Policy

Effective: October 23, 2026

1. Controller

Vathanakone Prakosay
Andersenstr. 1
06126 Halle (Saale)
Germany

2. What this site is

SpeedIQ (speediq.org) is a free internet speed test with browser privacy checks and a blog. There is no account, no shop, no form, no newsletter and no advertising. We do not store your test results. We only process the data listed below.

3. Data we process

3.1 Hosting and server logs

Cloudflare delivers all pages under www.speediq.org. Cloudflare fetches the content of the blog and the legal pages from Grigora. Your browser loads the images of the blog directly from Grigora's image server. When you open a page, these providers process technical data: IP address, date and time, page requested, browser type and version, operating system. This is needed to deliver the site and keep it secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Retention: Cloudflare and Grigora delete the logs according to their own periods. We will tell you the current period on request.

3.2 Speed test

When you click START, your browser downloads test data from the service speed.cloudflare.com (Cloudflare) and sends test data there. Your browser calculates download, upload and ping from the timing. Cloudflare processes your IP address and technical data of the requests. The test only starts when you click. We do not store or receive the results. According to Cloudflare, it truncates your IP address (IPv4 to /24, IPv6 to /48), evaluates the measurements anonymously for its own statistics (for example Cloudflare Radar) and shares them without your IP address with measurement partners such as Measurement Lab (M-Lab). We have no influence on this processing. Cloudflare's privacy policy applies. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the speed test you request). Access to your device is strictly necessary for the service you explicitly request (Section 25(2) No. 2 TDDDG).

3.3 Privacy checks

The 18 checks run in your browser. Most of them only read values your browser already has (for example screen size, time zone, language). Some checks send a request to a third party when you click them:

IP address, location, provider, VPN/proxy and DNS checks: ipinfo.io (IPinfo Inc., USA) returns information about your IP address.
IPv6 check: icanhazip.com (operated by Cloudflare) returns your IPv6 address.
Tor check: check.torproject.org (The Tor Project, Inc., USA) tells whether your IP address is a Tor exit.
WebRTC check: your browser contacts a STUN server of Google (stun.l.google.com) to find the IP addresses WebRTC reveals.
Ping check: speed.cloudflare.com (see 3.2).

These providers process your IP address. The checks only run when you click them. We do not store the results. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the check you request); Section 25(2) No. 2 TDDDG.

3.4 Storage in your browser

Your last test results (test history), in the blog, your text size choice are stored only in your browser (local storage). They never leave your device. You can delete them with "Clear" or in your browser settings. Legal basis: Section 25(2) No. 2 TDDDG (strictly necessary for the function you use) and Art. 6(1)(f) GDPR.

3.5 Fonts

The fonts are stored on our own servers. Your browser does not load fonts from Google or other providers.

3.6 Contact by email

If you write to us, we process your email address, your name (if you give it) and the content of your message to reply to you. Our email provider is Fastmail. Legal basis: Art. 6(1)(b) GDPR (your enquiry) and Art. 6(1)(f) GDPR (legitimate interest in replying). Retention: We delete the message once your enquiry is resolved, at the latest after 6 months.

On your first visit, a banner asks whether you agree to statistics. The banner is provided by GetTerms, a service of General Labs Pty Ltd, Western Australia, Australia. Your choice is stored in your browser so the banner does not appear on every visit. Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent). Storing your choice is strictly necessary (Section 25(2) No. 2 TDDDG). You can change your choice at any time via "Cookie settings" in the footer.

3.8 Audience measurement (statistics) – only with your consent

If you agree, we measure how many people visit the site and use the test. We use:

Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies and processes data on page views, device, browser and approximate location. Google Analytics does not store your IP address; Google uses it briefly on servers in the EU to determine country or region and then deletes it. User-level and event-level data is deleted after 2 months.
Cloudflare Web Analytics by Cloudflare. It sets no cookies and measures page views and load times. Cloudflare keeps the raw data for 7 days. Without your consent, we do not load either service.

Legal basis: your consent, Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via "Cookie settings". Withdrawal applies to the future.

4. Recipients and transfers to third countries

We only share data with the providers named above. They process data on our behalf or for their own purposes:

Service	Purpose	Registered office / location of processing
Cloudflare, Inc.	Delivery of all pages, speed test (speed.cloudflare.com), icanhazip.com, Cloudflare Web Analytics (only with consent)	101 Townsend St., San Francisco, CA 94107, USA. Transfer to the USA based on the EU-US Data Privacy Framework (Art. 45 GDPR), additionally EU standard contractual clauses (Art. 46(2)(c) GDPR)
Grigora (Latracal Solutions Private Limited)	Content of blog and legal pages, image server	Sub-processors according to Grigora include Hetzner Cloud (USA, Ashburn) and Cloudflare (worldwide)
IPinfo Inc.	IP information for the privacy checks (only on click)	USA
The Tor Project, Inc.	Tor check (only on click)	USA
Google	STUN server for the WebRTC check (only on click); Google Analytics 4 (only with consent, Google Ireland Limited)	Ireland / USA; transfer to Google LLC (USA) based on the EU-US Data Privacy Framework (Art. 45 GDPR), additionally standard contractual clauses (Art. 46 GDPR)
GetTerms (General Labs Pty Ltd)	Consent management	Western Australia, Australia; processing in Australia and Singapore. No adequacy decision; based on EU standard contractual clauses (Art. 46(2)(c) GDPR)
Fastmail Pty Ltd	Email	Australia (registered office); server locations see Fastmail's privacy policy

5. Your rights

You have the right to:

access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
object to processing based on legitimate interest (Art. 21 GDPR)
withdraw consent with effect for the future (Art. 7(3) GDPR)

Write to us at info@speediq.org. Complaint: You can complain to a data protection authority. The authority responsible for us is: Landesbeauftragter für den Datenschutz Sachsen-Anhalt, Postfach 1947, 39009 Magdeburg, Germany, https://datenschutz.sachsen-anhalt.de

6. Obligation to provide data, automated decisions

You do not have to give us any data. Without server logs, the site cannot be delivered. Without the transfer to speed.cloudflare.com, the speed test cannot measure. We make no automated decisions and do no profiling.

7. Cookies

Without your consent, this site sets no cookies for statistics. Only your choice in the consent banner is stored (section 3.7). Google Analytics sets cookies only after you agree (section 3.8).

8. Children

This site is not aimed at children. We do not knowingly collect data from children.

9. External links

If we link to other sites, their operators are responsible for data protection there.

10. Changes

We update this policy when the site or the law changes. The version published here applies.