Privacy

What is stored

• The result of a check, for 30 days. When you run a check we save the structured result — the URL you tested, the measurements, and the fix list — under a random ID, so the shareable link works. After 30 days it is deleted automatically and the link stops working. Result pages are marked noindex and are excluded in robots.txt, so they do not turn up in search.
• A rate-limit counter, for up to one hour. To stop one script exhausting the API quota for everyone, we count checks against your IP address in a counter that expires on the hour. The IP forms part of a key in an in-memory store; it is not written to any log, is never joined to your results, and is gone within the hour.
• An email address, only if you type one in. The alerts box below a result is optional and dismissible. If you use it, we keep the address and the URL you asked about so we can email you if that page drops below passing. Nothing else is attached to it, and asking us to delete it is enough.

What is not stored

• No accounts, because there is no login.
• No tracking cookies. There is no cookie banner because there is nothing to consent to.
• No web server access logs. They would contain visitor IP addresses, which would contradict everything on this page, so they are switched off.
• No advertising, and no third-party ad or retargeting scripts of any kind.
• No copy of your page. We ask Google to test the URL; we store the numbers that come back, not your content.

Third parties

Running a check sends the URL you entered to Google’s PageSpeed Insights API and its Chrome UX Report API, because that is where the measurements come from. Nothing else about you goes with it.

Site analytics are cookieless and aggregate — page views and a handful of events like “a check finished”. No individual visitor is identified and no IP address is stored by it.

When your result includes a hosting suggestion, that link is an affiliate link, marked rel="sponsored nofollow" and disclosed inline. It appears only when your server response time exceeds 600ms. Following it tells the provider you came from here; not following it tells them nothing. See the about page for why that condition exists.

Getting in touch

To have an email address removed, or to ask what is held about you, reply to any alert email or use the contact route listed on the about page. Given the above, the answer will usually be “nothing”.