Privacy Policy

Effective Date: October 26, 2026

Last Updated: October 26, 2026

      Core Commitment: SpeedPulse operates on transparency and minimization. We never read, upload, or inspect your personal files, hard drive contents, or browsing history. All throughput tests utilize synthetic, randomized binary data generated directly in browser memory and discarded immediately upon server receipt.
    

1. Information Collected Automatically

When you use the SpeedPulse platform, our PHP backend and diagnostic engines automatically process:

Network Protocol Data: Your public IP address (IPv4 or IPv6), port, HTTP headers, and request timestamp.
Synthetic Payload Throughput: The volume of synthetic binary bytes transmitted during download and upload tests, connection establishment duration, and transfer duration.
Latency and Jitter: Round-trip time (RTT) samples measured via HTTP queries to our ping endpoint, and statistical variation (jitter calculated via RFC 3550).

2. Device and Browser Information

To provide accurate diagnostic context for speed test results, the platform queries legitimate browser APIs for the following non-invasive telemetry:

Browser Environment: Browser brand, version, rendering engine (Blink, Gecko, WebKit), preferred language, and time zone.
Hardware Capabilities: Screen resolution, device pixel ratio (DPR), viewport dimensions, touch interface availability, logical CPU core count (as quantized by browser privacy limits), and device RAM estimate (as quantized by the Network Information / Device Memory APIs).
Network Information API: Connection type (e.g., 4G, Wi-Fi, Ethernet), estimated downlink, and round-trip time estimates where exposed by the browser.

3. Public IP and Geolocation Information

Your IP address is used to determine approximate geographic location (city, region, country) and Autonomous System (ASN) / Internet Service Provider (ISP). We do not request high-accuracy GPS hardware coordinates. Geographic estimations are based solely on IP routing tables and may differ if you use a Virtual Private Network (VPN), corporate proxy, or mobile carrier carrier-grade NAT (CGNAT).

4. Purpose of Processing

Data collected is strictly used for:

Calculating download and upload bandwidth speeds in Mbps and MB/s.
Assessing bufferbloat and latency stability under idle and loaded network conditions.
Providing qualitative performance ratings for common applications (gaming, video conferencing, 4K streaming).
Maintaining test session history in the backend database for your reporting and export needs.

5. Third-Party Endpoints and External Lookups

If you are connected via a public internet IP address, our backend queries a public IP geolocation provider (e.g. IP-API) solely to resolve your ISP name, ASN, and country/city. This request exposes your public IP address to the lookup provider. No tracking scripts, advertising networks, or social tracking pixels are loaded on SpeedPulse.

6. Storage and Database Logging

SpeedPulse stores speed test results and associated diagnostic metadata in a backend database (MySQL or SQLite table speedtest_logs). The recorded record includes your test UUID, timestamp, measured speeds, latency, jitter, device metadata, and client IP. A copy of recent test results is also cached in your browser's localStorage for offline convenience.

7. Data Retention and Deletion

You have full control over your historical records:

You can clear all stored records from both the database and your browser storage at any time by clicking the Clear History button on the dashboard.
When exporting reports (JSON or CSV) or copying a shareable summary, sensitive identifiers—including client IP addresses and geographic coordinates—are redacted by default.

8. Security Measures

We implement industry-standard security safeguards:

Input validation and prepared SQL statements to prevent database injection.
Synthetic upload payloads are parsed in memory and discarded without persisting to disk.
Request-size limits (50 MB cap per upload request) and rate limits to prevent server resource abuse.
Security HTTP response headers including X-Content-Type-Options: nosniff, Cache-Control: no-store, and X-Frame-Options: SAMEORIGIN.

9. Site Owner and Contact Details

SpeedPulse is deployed on a self-hosted or managed web server. For privacy questions, data deletion requests, or technical support, please contact the site administrator:

      Platform Administrator: [Site Owner / Administrator Name]

      Contact Email: [admin@yourdomain.com]

      Deployment Environment: Localhost / XAMPP Apache & PHP Stack

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect modifications in diagnostic methodologies, regulatory requirements, or application features. Continued use of the platform after updates constitutes acceptance of the revised terms.