Privacy Policy

1. What we collect

When you run the latency test and the result is saved, the record contains:

• The measured round-trip time to each service, and whether each one responded.
• The name of your internet provider and its autonomous system number, and an approximate city — all derived from your IP address, not from your device.
• Your browser family and operating system family, for example "Firefox" and "Android". Not a full user-agent string.
• A timestamp.
• A non-reversible hash of your IP address, used only to spot duplicate submissions.
• If you are signed in, your Pi identifier and username.

Server logs also record ordinary request information for a short period, as any web server does.

2. What we deliberately do not collect

• No advertising or marketing identifiers, and no third-party analytics or tracking scripts of any kind.
• No browser fingerprinting.
• No email address, phone number, or real name. We never ask for them.
• No speed test results. Those are produced inside the OpenSpeedTest widget, and your browser's same-origin policy prevents this page from reading them. Even if we wanted them, we could not have them.
• No wallet balance, keys, or transaction history.

3. How your IP address is handled

Your IP address is used in the moment, then discarded. It is used to look up your provider and approximate city, and it is hashed with a secret salt so that repeat submissions can be recognised without the address itself being kept. The stored value cannot be turned back into your IP address, and without the salt it cannot be matched against a list of candidate addresses either.

Approximate location means city-level at best, and often only the location of your provider's equipment rather than yours.

4. Cookies

This site sets two cookies and no others. Neither is used for advertising or tracking across sites.

• An anonymous identifier, so that results you save without signing in come back to you in this browser. It contains a random value and nothing else.
• A session cookie, set only if you sign in with Pi. It holds a random token; the copy on our server is stored hashed.

Both are HttpOnly, so page scripts cannot read them. Clearing your browser data removes them, and with the anonymous one, the link to any results saved under it.

Your theme choice is kept in local storage on your own device and never sent anywhere.

5. Pi sign-in

Sign-in is optional. When you use it, the Pi platform gives us an access token, which our server exchanges with the Pi Platform API for your identifier and username. That identifier is scoped to this application: it identifies you here and cannot be used to recognise you in any other Pi app.

We request only the scopes the app needs — your username, and inside the Pi Browser the payments scope that Pi requires for the sign-in call to succeed. We never receive your password or wallet keys.

Signing in moves results you saved anonymously in this browser onto your account, so that nothing is lost when you sign in.

6. Donations

If you donate, we store the payment identifier, the amount, the transaction id, the status, your Pi username, and the message you chose to attach. That message may be shown publicly on this site beside your username, so treat it as public.

The payment itself is processed by the Pi platform and recorded on the Pi Blockchain, which is public and permanent by design and outside our control.

7. Third parties your browser contacts

Using this site causes your browser to make requests to parties other than us. We do not send them any information about you beyond what an ordinary web request necessarily reveals, chiefly your IP address:

• OpenSpeedTest — the speed test widget and its measurement traffic.
• The services in the latency list — Google, Cloudflare, YouTube, GitHub, Wikipedia, Amazon, Microsoft, Discord, Steam and Telegram. Each probe is an ordinary anonymous request for one small static file, sent with cookies and credentials switched off.
• Pi — only if you sign in or donate.
• An IP geolocation provider — the server, not your browser, sends your IP address to look up your provider name and city. This can be switched off entirely by the operator.

All fonts, scripts and styles are served from this site. Nothing is loaded from a font or script CDN.

8. How long we keep things

• Latency results: the most recent hundred runs per person. Older ones are deleted automatically as new ones arrive.
• Sessions: they expire on their own, by default after thirty days, and are removed when you sign out.
• Donation records: kept for as long as the site operates, for accounting.
• Server logs: short-lived, and rotated by the server.

9. Your control over your data

• See it — your results are on the history section of the home page, and the CSV export gives you the same data as a file.
• Delete it — "Clear history" removes every result tied to you, immediately and permanently. If you are signed in, that covers every device.
• Stop being identified — sign out, and clear your browser data for this site to drop the anonymous identifier.
• Ask us — if you want a donation record removed or a question answered, write to the address below.

Because we hold no email address or real name, we may not be able to connect a request to a record without the payment identifier or a signed-in session.

10. Security

The site is served over HTTPS only. Session tokens are stored hashed, IP addresses are stored hashed with a secret salt, and the server API key used for payments never leaves the server. A strict Content Security Policy limits what the page may load and where it may connect. No system is perfect, and we make no guarantee of absolute security.

11. Children

This site is not directed at children and collects no information that identifies anyone personally. The Pi platform sets its own age requirements for its accounts.

12. Changes

If this policy changes, the date at the top changes with it. Material changes will be noted on the site itself rather than made quietly.

13. Contact

Questions, or a request about your data: —