Last updated: May 4, 2026

Privacy Policy and Cookie Policy

RealMbps respects your privacy. This page transparently describes what data we collect, why, how we protect it, and what rights you have under the General Data Protection Regulation (GDPR / EU 2016/679).

1. Data controller

The website RealMbps (https://realmbps.com) is operated independently. For any question regarding the processing of personal data, please write via the contact page.

2. What data we collect

2.1 Speed measurement

The speed test runs entirely in your browser, against public Cloudflare servers (speed.cloudflare.com). Test results (ping, jitter, download, upload) are not stored by RealMbps unless you voluntarily choose to publish them on the community leaderboard.

2.2 Publishing to the leaderboard (optional)

If you choose to publish your result, we collect:

• The nickname you enter (max 16 characters)
• The country (2-letter ISO code; derived from CDN headers on our server or selected by you)
• The speed numbers (download, upload, ping, jitter)
• The timestamp of the submission

These data are stored in a Redis database (Upstash, Europe region) and displayed publicly on the leaderboard. To prevent abuse, we temporarily keep (for 5 minutes) a hash of the IP address for rate limiting; after 5 minutes the hash is deleted. The IP address is never permanently linked to the published nickname.

2.3 Google Analytics 4

We use Google Analytics 4 (ID: G-ZV36M7KGFC) to understand which pages are most useful, which countries traffic comes from, and to improve the experience. GA4 uses cookies and anonymous identifiers. Custom events tracked: test completion (speed_test_complete), leaderboard publication (wall_publish), theme/language switch. We do not share directly identifying data (nickname, raw IP) with Google Analytics.

2.4 Google AdSense (advertising)

To fund the project, we display advertising served by Google AdSense. Google and its partners may use cookies and identifiers to serve relevant ads based on your visits to our site and other sites on the Internet. You can opt out of personalised advertising by visiting Google Ads Settings. In compliance with GDPR, when you enter the site a consent banner (Google CMP) is displayed, letting you accept or reject the use of personalised advertising cookies.

2.5 Cloudflare

The speed test queries Cloudflare servers (speed.cloudflare.com). Cloudflare may collect your IP address for security and traffic management purposes, as described in the Cloudflare privacy policy. RealMbps does not receive individual traffic data from Cloudflare.

3. Cookies used

Technical cookies (strictly necessary, no consent required):

• realmbps.theme — stores the chosen colour palette
• realmbps.lang — stores the chosen language
• realmbps.wall.user — stores nickname and country to pre-fill the publish modal (only if you have published a result)

Analytics cookies (Google Analytics): _ga, _ga_*, _gid. Maximum lifetime 14 months.

Advertising cookies (Google AdSense, only if you accept): __gads, __gpi, NID and others set by Google. Variable lifetime up to 13 months.

You can delete cookies from your browser at any time. For more information: aboutcookies.org.

4. Legal basis and purposes

• Speed measurement: legitimate interest (Art. 6.1.f GDPR) — providing the requested service.
• Publishing to leaderboard: explicit consent (Art. 6.1.a GDPR) — given when you click "Publish".
• Analytics: legitimate interest in aggregated statistics, with pseudonymised data.
• Personalised advertising: explicit consent via the CMP banner. If you refuse, you will see non-personalised ads.

5. Data retention

• Results published on the leaderboard: retained indefinitely (the leaderboard is permanent). You can request deletion via contact.
• IP hash (rate limiting): 5 minutes, then deleted.
• Local technical cookies: until you delete them or change browser.
• Google Analytics data: 14 months (GA4 default setting).

6. Your rights (GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Object to processing
• Portability of your data
• Withdraw consent at any time
• Lodge a complaint with your national Data Protection Authority (e.g. ICO in the UK, DPC in Ireland, CNIL in France)

To exercise any of these rights, contact us via the contact page: we respond within 30 days.

7. Data transfer outside the EU

Some technical services (Google Analytics, Google AdSense, Cloudflare) may transfer data to the United States. All providers operate under the EU Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.

8. Security

The site uses an HTTPS connection with a TLS certificate. The leaderboard database is protected by credentials and only accessible from our backend. We do not store passwords (there is no user authentication).

9. Changes

We may update this privacy policy. We recommend reviewing it periodically. The date of the last change is at the top. Material changes will be announced with a banner on the site.

Document version: 1.0 · Updated May 4, 2026.