Last updated: May 4, 2026

Privacy Policy and Cookie Policy

RealMbps respects your privacy. This page transparently describes what data we collect, why, how we protect it, and what rights you have under the General Data Protection Regulation (GDPR / EU 2016/679).

1. Data controller

The website RealMbps (https://realmbps.com) is operated independently. For any question regarding the processing of personal data, please write via the contact page.

2. What data we collect

2.1 Speed measurement

The speed test runs entirely in your browser, against public Cloudflare servers (speed.cloudflare.com). Test results (ping, jitter, download, upload) are not stored by RealMbps unless you voluntarily choose to publish them on the community leaderboard.

2.2 Publishing to the leaderboard (optional)

If you choose to publish your result, we collect:

• The nickname you enter (max 16 characters)
• The country (2-letter ISO code; derived from CDN headers on our server or selected by you)
• The speed numbers (download, upload, ping, jitter)
• The timestamp of the submission
• The approximate city and region, taken from the CDN geolocation headers (not from an IP address read by us)
• The ISP, inferred from the network's autonomous system number (ASN): we use the IP only for that lookup, in memory, and never store it
• The connection type you declare (fibre, mobile, fixed wireless or unspecified)
• A random result code, shown to you when publishing, used to request removal

These data are stored in a Redis database (Upstash, Europe region) and displayed publicly on the leaderboard. To prevent abuse, we temporarily keep (for 5 minutes) a hash of the IP address for rate limiting; after 5 minutes the hash is deleted. The IP address is never permanently linked to the published nickname.

Publishing happens only with your explicit consent: you must tick a box in the form, which is not pre-selected. If you change your mind, write to us via Contact quoting the result code or the nickname: we delete the row from the leaderboard without asking for any further data.

The leaderboard is for entertainment and the results are not verified: they have no official standing and are not evidence against an ISP.

2.3 Google Analytics 4

We use Google Analytics 4 (ID: G-ZV36M7KGFC) to understand which pages are most useful, which countries traffic comes from, and to improve the experience. GA4 uses cookies and anonymous identifiers. Custom events tracked: test completion (speed_test_complete), leaderboard publication (wall_publish), theme/language switch. We do not share directly identifying data (nickname, raw IP) with Google Analytics.

2.4 Google AdSense (advertising)

The site does not show advertising at the moment. If we use Google AdSense in the future, we will say so on this page and ask for your consent before using advertising cookies.

2.5 Cloudflare

The speed test queries Cloudflare servers (speed.cloudflare.com). Cloudflare may collect your IP address for security and traffic management purposes, as described in the Cloudflare privacy policy. RealMbps does not receive individual traffic data from Cloudflare.

3. Cookies used

Technical cookies (strictly necessary, no consent required):

• realmbps.theme — stores the chosen colour palette
• realmbps.lang — stores the chosen language
• realmbps.wall.user — stores nickname and country to pre-fill the publish modal (only if you have published a result)

Analytics cookies (Google Analytics): _ga, _ga_*, _gid. Maximum lifetime 14 months.

You can delete cookies from your browser at any time. For more information: aboutcookies.org.

4. Legal basis and purposes

• Speed measurement: legitimate interest (Art. 6.1.f GDPR) — providing the requested service.
• Publishing to leaderboard: explicit consent (Art. 6.1.a GDPR) — given when you click "Publish".
• Analytics: legitimate interest in aggregated statistics, with pseudonymised data.

5. Data retention

• Results published on the leaderboard: retained indefinitely (the leaderboard is permanent). You can request deletion via contact.
• IP hash (rate limiting): 5 minutes, then deleted.
• Local technical cookies: until you delete them or change browser.
• Google Analytics data: 14 months (GA4 default setting).

6. Your rights (GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Object to processing
• Portability of your data
• Withdraw consent at any time
• Lodge a complaint with your national Data Protection Authority (e.g. ICO in the UK, DPC in Ireland, CNIL in France)

To exercise any of these rights, contact us via the contact page: we respond within 30 days.

7. Data transfer outside the EU

Some technical services (Google Analytics, Cloudflare) may transfer data to the United States. All providers operate under the EU Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.

8. Security

The site uses an HTTPS connection with a TLS certificate. The leaderboard database is protected by credentials and only accessible from our backend. We do not store passwords (there is no user authentication).

9. Changes

We may update this privacy policy. We recommend reviewing it periodically. The date of the last change is at the top. Material changes will be announced with a banner on the site.

Document version: 1.0 · Updated May 4, 2026.